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Preparing 
for the Wor 


Power outages, fires, 
floods and terrorism 
are near-constant 


Online Exclusive: 


Microsoft Draws User With 
Latest Release Patches 


Frustration mounts 
users struggle 
install numerous fixes 


JAIKUMAR VIJAYAN 
Microsoft Corp.’s release last 
week three critical patches 
fix flaws various Win- 
dows products drew flak from 


users who expressed frustra- 
tion the company’s continu- 
ing problems with security. 

one its biggest month- 
patch releases date, Mi- 
crosoft issued updates aimed 
closing several major holes 
products ranging from Win- 
dows 4.0 the 64-bit edi- 
tion Windows Server 2003. 


NEWSPAPER 


PERIGDICALS 
BOX 1346 


ANN ARBOR 


Real disaster tales from the Shark Tank archives: 
QuickLink 45762 | www.computerworld.com 


tron Corp. 


Also affected were several 
versions its Outlook Ex- 
press e-mail program. 

One the patches fixed 
separate vulnerabilities; an- 
other fixed four. 

“We are extremely con- 
cerned the high amount 
vulnerabilities and patches 
from Microsoft. This goes 
against the credibility what 
they have been saying,” said 
Michael Kamens, global secu- 
rity director Thermo Elec- 


The fact that even new 
product such Windows 
Server 2003 has problems 
“brings great joy our 
Patches, page 


Best Buy 
Outsource 
Accenture 


head count expected drop from 820 
retailer stresses agility over customization 


BY CAROL SLIWA 
In an uncommon move in an 


threats for industry that usually takes 


dependent businesses. Plus, the 
coming hurricane season expected 
worse than usual. 
how get ready. Stories begin 
Page 33. 


selective approach out- 
sourcing, retailer Best Buy Co. 
last week confirmed its inten- 
tion outsource all its 
operations Accenture Ltd. 

Richfield, Minn.- 
based Best Buy cur- 
rently employs 820 
people its depart- 
ment but said ex- 
pects only re- 
main with the compa- 
ment with Accenture. 

Best Buy spokeswoman 


Dawn Bryant said that those 


will oversee strategy 
and manage the relationship 


with Accenture. About 650 


employees are expected re- 


For related con- 


ceive comparable job offers 
from the management and 
technology consulting firm. 

Best Buy last week notified 
the other 130 employees 
that their positions are being 
eliminated. Bryant said the 
employees will remain the 
payroll for days, 
after which they will 
receive severance 
packages. 

Bryant said posi- 
tions are being elimi- 
nated areas re- 


dundancy, and she stressed 
that job performance wasn’t 


factor the decision-making 
process. “It’s about needing 
really efficient organi- 
zation and being able react 


changing business needs,” 


Buy, page 


Afoot 


Exempt 20k 


FromH-1B Cap 


Bill would allow hiring 
more foreign grads 
with advanced degrees 


PATRICK THIBODEAU 
WASHINGTON 

There’s new push Con- 
gress increase 20,000 the 
number foreign workers 
holding H-1B visas. Proposed 


legislation 
would accom- 
plish that ex- 
empting foreign 
graduates with 
advanced de- 
grees from the 
visa cap. 

The bill, introduced earlier 
this month Rep. Lamar 
Smith (R-Texas), supported 
Compete America, co- 
alition manufacturers, aca- 
demic groups and vendors 
such Microsoft Corp., In- 
tel Corp., Oracle Corp., and 
page 
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Introducing the new Microsoft Office System. 


Now users can more for themselves you can focus 
the important things. More than just the core suite 
familiar with, the new Office System 
integrated system easy-to-use, expanded programs, 
servers, services, and solutions that help end users 


more self-sufficient. With Microsoft Office Professional 


Edition 2003, Microsoft SharePoint™ Services, 
and Microsoft Office SharePoint Portal Server 2003, end 
users will have the ability create and manage their 
own team work spaces. not only they able 

collaborate and share information easily and more 
securely, but you'll free what you really need 


do. find out how the Microsoft Office System can 


work for you, microsoft.com/officelT 


Microsoft More than what it used to be, it's nowa 
Office System comprehensive, customizable system. 


Programs Servers Services 


Access 2003 PowerPoint® 2003 Project Server 2003 Live Meeting 
Excel 2003 Project 2003 Live Communications Office Online 
Server 2003 


FrontPage” 2003 Publisher 2003 
>Path™ 2 

InfoPath tates Visio® 2003 Server 3003 

OneNote™ 2003 Word 2003 SharePoint™ Portal 

Outlook* 2003 Server 2003 


Exchange Solutions 


Solution Accelerators 


Enabling Technologies 
Windows Server™ 2003, Windows® SharePoint Services, 
Rights Management Services 


Microsoft 
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When comes data backup and recovery, you want reliable, high-performance solution you 


can count on. why created BrightStor ARCserve Backup Release 11, featuring the 
very latest storage innovations. BrightStor ARCserve Backup faster and easier than ever, 
enhancing both efficiency and productivity. And with superior technology, you can 


confident your files are properly backed and will easily restored should disaster occur. 
For more information, ca.com/storage/arcserve. 


2004 Computer Associates International, Inc. (CA). 
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Drives the UPS Machine 

the Management section: The UPS World- Seeing Voices 
port hub Louisville, Ky., uses $100 million the Technology Voice- 
homegrown software manage automatic tools 
sorting almost million packages day. The getting better maintaining 
system also helps reduce manual labor and harmony across even large-scale 
increases employee retention. Page converged networks. Page 


The 9/11 commission sug- the Mark: Mark Hall says DISASTER RECOVERY 


disaster for your trading 
gests General Electric tool that CIOs use monitor 


artners could mean dis- 
structural model for the operations could used Preparing for the Worst 


aster for you. Here’s how 
intelligence community. CFOs watch them. The risks are piling up. This 


CEO Sanjay Kumar comes Maryfran Johnson writes that special report provides peer 


under scrutiny for his preparing for postdisaster re- tested tips for keeping your 
role Computer covery operations isn’t too business running during the 


accounting scandal. and cost lot. most common disasters and Dose Reali- 

why aren’t you doing it? ty. Experts offer 
Oracle’s JDeveloper 10g avoiding classic mistakes tips for conducting disaster 


prepared. 


aims make development Pimm Fox says companies when making disaster recov- recovery tests. For example, hold 


easier for programmers that aren’t the business 
aren’t familiar with Java. should pull the plug their 
Microsoft considers H&R Block did. your suppliers! 
Thornton May has found mixed bag for the 
MySQL that your direct reports con- disaster recovery field: 
ing support its sist fully qualified leaders Rising From Disaster. raised awareness, but suc- 
database. and less-qualified Users such Joe Torres, cessful remediation 
types. You need identify disaster recovery coordi- efforts led credibility problems 
The Seattle Mariners shut out the ones invest in. for Miami-Dade and compiacency. Also: VXA data 
spam with e-mail-blocking (left), offer tips tapes can withstand coffee spills. 
technologies. Robert Mitchell says online keep systems running 
reservations systems show the during variety Opinion: Dear old Mom said 
McDonald’s adds complexity delivering end- disasters. expect the worst. That’s good 
menu, with provider to-end, real-time data access. advice for managing disaster 
supporting business Classic Mistakes. Because recovery efforts with your out- 
tions part the deal. Barbara Gomolski advises disaster planning takes sourcers, says columnist Mark 
David Yen explains Prove efficiency and customer ects almost all companies, survey profes- 
Sun’ decision stop Service. mistakes are bound sionals disaster recovery issues. 
oping two processors. 


ery plans. And don’t “real-world” tests your organi- 
zation’s most critical systems 


once year. 
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Commission Eyes 
Intelligence 
Community Model 


Structural overhaul agencies focuses 
centralized control, workforce 


DAN VERTON 
WASHINGTON 
AST WEEK, member 
the independent 
commission investi- 
gating the Sept. 
2001, terrorist attacks put CIA 
Director George Tenet no- 
tice that massive structural 
change the way for the 
US. intelligence community 
and that when it’s finished, the 
CIA hierarchy may look more 
like General Electric Co.’s than 
typical spy agency’s. 
Former Navy Secretary John 
Lehman told Tenet during 
April hearing that the 
intelligence community 
faces “an problem” stem- 
ming from “deep, embedded, 
functional throughout 
the community common 
protocols for information.” 
One the steps the com- 
mission may take fix that 
problem, said 
Lehman, 
force the CIA 


THE DAY PHOTOS 


Dan Verton’s photojournal of 


ports GE-style reporting 


Tenet, adding that having 
smaller staffs gives executives 
more power over execution. 
real metrics and 
power move people and 
data you need achieve 
better execution smart way 
think about this discipline 
for the future.” 

Hank Zupnick, CIO 
subsidiary Capital Real Es- 
tate Stamford, Conn., said 
the success the company’s 
culture stems 
from the fact that 
technologists are 


and other agen- the testimony Tenet and employed 
cies adopt the available online: strategic business 
corporate 24400 drivers. 

model, which is www.computerworld.com “As a ClO at 


based small, 
centralized senior manage- 
ment team that’s surrounded 
IT-enabled functional de- 
partments. “[That] the mod- 
that beginning take 
shape our mind,” said. 

Although the comparison 
between one the world’s 
largest multinational compa- 
nies and the intelligence 
community hodgepodge 
dozens federal agencies 
that operate more less inde- 
pendently may seem 
strange some, Tenet wel- 
comed the idea. 

“It’s good model,” said 


GE, I’m here to be 
business manager, help 
our business grow and profit, 
not only manage technol- 
ogy,” Zupnick said. also 
noted that all projects are 
subject Six Sigma quality 
standards and continual re- 
views senior business man- 
agers ensure that still 
relevant the changing needs 
the business. 


Strategic Role for 
Rob Enderle, principal analyst 
The Enderle Group San 
Jose, said studies GE’s 
management have shown that 


the group plays strategic 
role the company, with the 
CIO reporting directly 

the CEO. 

“They created effective syn- 
ergies that reduced overall 
cost and allowed one group 
benefit from the work other 
groups,” said Enderle. How- 
ever, added that while GE’s 
strategic use was the re- 
sult “huge focus quali- 
and integration,” the com- 
pany’s business model wasn’t 
compared with those com- 
panies other industries. 
Therefore, the 9/11 commis- 
sion may want look addi- 
tional companies and indus- 
tries that have undertaken ma- 
jor reorganizations fix simi- 
lar problems, said. 

For example, “they might 
want look pharmaceuti- 
cal companies, which have a 
reputation for being better 
intelligence gathering and 
competitive intelligence,” En- 
derle said. Likewise, General 
Motors Corp.’s massive intelli- 
gence problem the 1970s 
might offer useful example, 
said. 

Tenet told the commission 
that U.S. intelligence needs 
new recruits who have what 
former CEO Jack Welch 
credited his successor, Jeffrey 
Immelt, with having: cutting- 
edge technological back- 
ground and keen strategic 
intellect. needs people with 
“revolutionary ideas about 
technology” and how works, 
said Tenet. 

“The people recruit- 
ing aren’t 30-year veterans 
anymore,” said. at- 
tracting whole new labor 
force that doesn’t remember 
the Cold War, and they expect 
structure that’s going 
more agile and mobile and 


more technologically profi- 
cient.” 46250 


PHOTOS BY DAN VERTON 


Michael Rolince, the acting 
assistant director for 
gence, stating. 

When asked commission 
member Timothy Roemer he’s 
able send classified e-mail 
with attachment his coun- 
terparts the FBI, Patrick 
Hughes, assistant secretary 
for information analysis the 
DHS, said can so, but 


WASHINGTON 

Despite the monumental 
efforts that have been made 
since the Sept. 11, 2001, 
terrorist attacks improve data 
sharing throughout the U.S. intel- 
ligence community, major prob- 
lems still exist the FBI and 
the Department Homeland 
Security (DHS), according 
the commission investigating 


the attacks. with difficulty. 

After two days testimony The problem stems from “the 
that ended April 14, the technical interface between the 
Commission Terrorist At- Department Homeland Securi- 
tacks Upon the United States and the FBI,” said Hughes. 


“But have FBI liaison officers 
present the DHS, and 
would pass them and they 
would use secure fax.” 

unprecedented public 
appearance, James Pavitt, the 
official charge the 
clandestine service, said the 
agency able directly share 
electronic data “without any 
question” with the FBI and the 
Terrorist Threat Integration Cen- 
ter, the central clearinghouse for 
all terrorism intelligence analysis. 
However, when comes shar- 
ing with the DHS, not have 
the same level confidence 
this time,” said. 

TTIC Director John Brennan 
said has direct electronic 
connectivity the agencies 
works with. But analysts the 
TTIC are still forced conduct 
multiple searches for informa- 


issued two scathing reports 
that condemned the informa- 
tion-sharing capabilities key 
agencies the fight against 
terrorism. 

“It clear that gaps 
gence sharing still exist,” the 
commission stated staff re- 
port titled “Reforming Law En- 
forcement, Counterterrorism, 
and Intelligence Collection 
the United States.” The report 
outlines multitude short- 
comings that still existed 
cently last fall. 

For example, FBI agents 
complained lack comput- 
ers with access Intelink, the 
intelligence cen- 
tralized, top-secret intranet. And 
the agent charge the 
Washington field office, the 
second-largest FBI office the 
nation, said lack basic con- 
nectivity prevented him from 


FBI, DHS Playing Catch-up 


the Department Justice. databases across agencies, 

“We are kidding ourselves said. 
think that there seamless FBI Director Robert Mueller 
integration among all the called the report 


snapshot time” and said 
improvements have been made 
since then and continue 
made. 
“Transitions take time,” said 
Mueller. “If you look the 
and the they will tell you 
there are number compo- 
nents transforming orga- 
nization. are still working 
the information technology 
our communications, but 
road solving those 


agencies,” the report quoted 


Dan Verton 


— 
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Accounting Scandal Raises 
Questions About Fate 


Indictments former finance executives 
prompt suspicions complicity 


STACY COWLEY 
Following wave indict- 
ments this month that netted 
guilty pleas securities fraud 
and other charges from sever- 
former finance executives 
Computer Associates Interna- 
tional Inc., speculation turn- 
ing the fate the compa- 
ny’s CEO. 

has already admitted 
improper accounting practices 
its 2000 fiscal year that 
were under investigation 
the Securities and Exchange 
Commission and U.S. Depart- 
ment Justice [QuickLink 
44563]. The company has 
since revamped its accounting 
methods, replaced most its 
board and pushed out num- 
ber executives tainted 
fraud. But one executive from 
that era, Sanjay Kumar, now 
serves the company’s CEO. 
And questions linger about 
the then-president and chief 
operating officer’s involve- 
ment accounting 
manipulations. 


Potential Targets 

The DOJ complaint against 
Ira Zar, chief financial 
officer until last October, 
charges that regularly met 
with two other unnamed 
“high-level” executives who 
allegedly knew and approved 
the financial sleight 
hand. Zar the time reported 
directly Kumar, who turn 
answered then-Chairman 
and CEO Charles Wang, 
company co-founder who has 
since retired. 

The continuing its 
investigation conjunction 
with the SEC, and speculation 
the and financial sectors 
persists that Wang and Kumar 
may targets future 
actions. 

Some financial analysts are 
already calling for Kumar’s 
resignation, arguing that 
the company’s operational 


head, either knew 
should have known what was 
going on. Mike Trigg, ana- 
lyst Morningstar Inc. 
Chicago, issued report blast- 
ing for management 
team that don’t trust,” and 
New York-based Credit Suisse 
First Boston LLC wrote “in- 
creasing fear” that Kumar 
one the implicated 
but unnamed executives. 
Credit Suisse called Kumar’s 
forced departure scenario 
that being widely reported 
Wall Street.” 

statement acknowledging that 
the company and its officers 


company that in- 
vestors didn’t trust 


castigated for hard- 
ball sales tactics. 


| . 
ganizations and 


could face civil and criminal 
proceedings [QuickLink 
a4430], but declined further 
comment. 

Complicating the issue 
Kumar’s future the general 


| consensus among IT industry 
observers that has done 

good job leader. When 


Kumar ascended August 
2000, inherited 


and that customers 


response, Kumar 
overhauled ac- 
counting and corpo- 
rate governance, re- 
formed its sales and 
customer service or- 


made customer satisfaction 
top priority. 

The changes have worked, 
according Jeffrey St. Ger- 
main, project manager for 
the Massachusetts Depart- 
ment Virtual 
Education Space project, 
which runs portal 
software. “At least our side, 
things have gotten better,” 
said. “Perhaps because 
what’s been going on, they’ve 
been more attentive us.” 

Javed Matin, CEO Myriad 
Solutions Inc. Silver Spring, 
said his consul- 
tancy, which 
based around 
products, lost 
any deals because 
the accounting scan- 
dal. don’t think it’s 
affected our 
clients any way, 
shape form,” 
said. “It’s been going 
for long, and 
Computer Associ- 


ates isn’t the only company 
that’s had this sort problem.” 
Kumar indicted, some 
disruption possible. “That 
would get lot visibility. 
People would take notice,” 
Matin said. have wait 
and see. I’m hoping would- 
have any adverse effects 
our business business.” 
Michael Dortch, analyst 
the Robert Frances Group 
Inc. Westport, Conn., said 
will weather any shake-up. 
“I’m not worried about them, 
and none our customers 
seem very worried, ei- 
ther,” said. “What most 
executives care about are the 
next deliverables. something 
were happen impede 
Sanjay’s ability lead, they’d 
find the engine would keep 
going. bigger than any 
one individual the manage- 
ment team.” 46246 


Cowley writes for the IDG 
News Service. 


New Tool Aims 
Ease Java Development 


JDeveloper 10g adds 
visual capabilities 


CAROL SLIWA 
The developers who write or- 
der management applications 
for Associated Wholesalers 
Inc. decided last September 
test beta version Oracle 
Corp.’s JDeveloper 10g. 

November, they were en- 
grossed heavy-duty devel- 
opment service-oriented ap- 
plications replace the main- 
frame-based systems they had 
been using for over years, 
according Les Morton, 
product manager the order 
management applications. 

“Bear mind, none 
had any Java programming ex- 


perience,” Morton said. “We 


also had idea what J2EE is.” 
That’s exactly the sort re- 
action that Java tools vendors 
such Oracle have been hop- 
ing get from developers 
new Java. They have been 
working make their tools 
easier use hopes that 


non-Java programmers will 
attracted their development 
environments over Microsoft 
Corp.’s rival .Net approach. 

Productivity and ease use 
are typically associated with 
Microsoft’s tools, while Java 
and especially J2EE develop- 
ment are often viewed more 
complex. 

But Oracle’s JDeveloper 10g, 
released last week, one 
collection new tools that 
vendors hope will start re- 
verse that image. Rob Cheng, 
product marketing director 
Oracle’s application server 
and tools, cited the drag-and- 
drop capabilities JDevelop- 
10g’s visual Struts page-flow 
modeler and visual Web- 
page editor important steps 
the right direction. 

Cheng also noted that JDe- 
veloper 10g’s support for the 
Unified Modeling Language 
intended help developers 
think through complex de- 
signs before they start produc- 
ing code. 

The new tool’s Application 


Development Framework 


takes the models from the tool 
and “implements all the hard 
stuff underneath that the non- 
Java experts wouldn’t want 
code themselves,” Cheng 
added. said ADF has pre- 
built runtime libraries that will 
reduce the amount code 
that developers need write. 

ADF will run any J2EE 
application server and has 
been certified run BEA 
Systems Inc.’s WebLogic and 
the open-source JBoss, ac- 
cording Cheng. 

“No other tools vendor 
with productivity framework 
can claim that their frame- 
work will run any J2EE 
application server,” Cheng 
said. all tied their 


application servers.” 


The real sell- 
ing point was 


maintain the archi- 
tectural principles 
our projects. 


LES MORTON, PRODUCT 
ASSOCIATED WHOLESALERS INC. 


Although Oracle aims at- 


tract general developers with 


the tool, analysts said they ex- 


pect hold the greatest ap- 
peal for users Oracle’s appli- 


cation server and database. 
Indeed, one reason Associ- 


ated Wholesalers decided 

with the tool was that al- 
ready used Oracle’s database 
server and Internet develop- 

ment suite, Morton said. 


But Morton also stressed 


the attractiveness the data- 


binding capabilities ADF 


and ease development with 
JDeveloper. “The real selling 


point was that allowed 


maintain the architectural 


principles our projects,” 
said. “We wanted have 


service-oriented architecture 


for our system. The data-bind- 


ing framework allowed that.” 


Mark Driver, analyst 
Gartner Inc., said the code- 
centric JDeveloper eases 
development for medium- 


large-scale projects, but Ora- 
cle still has offering the 


“J2EZ” class, such 
WebLogic Workship and Sun 
Microsystems Inc.’s upcoming 
Java Studio Creator, target 


the traditional Microsoft audi- 


ence. 46255 
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Sun Overhauls 
Hardware Units 


Sun Microsystems Inc. reported 
million loss for its third 
quarter and announced more 
management changes and 
reorganization its hardware 
units. Microprocessors and both 
high- and low-end Sparc servers 
are being combined new 
Throughput Systems unit under 
David Yen, executive vice 
president Sun. Systems based 
processors from Intel Corp. 
and Advanced Micro Devices Inc. 
will folded into Sun’s Network 
Systems division. 

John Fowler was named act- 
ing executive vice president 
Network Systems and lead tech- 
nology officer for Sun 
whole. Both and Yen report 
Jonathan Schwartz, who be- 
came president and chief operat- 
ing officer earlier this month. 
Sun also said Mark Tolliver, its 
chief marketing and strategy 
officer, and Neil Knox, who had 
been charge volume sys- 
tems, are leaving the company. 
(Read interview with Yen 
about Sun’s processor develop- 
ment plans, page 12.) 


Offers 4-CPU 


Opteron Server 


Hewlett-Packard Co. today 

will formally announce its first 
servers based AMD’s Opteron 
processor, including four-CPU 
model. said the ProLiant 
DL585 supports twice the mem- 
ory capacity and less expen- 
sive than its DL580 system, 
which based Intel’s Xeon 
chip. But the DL585 lacks the 
memory protection features built 
into the DL580, added. 


PeopleSoft Adds 
Rapid Rollout Tools 


PeopleSoft Inc. today plans 
expand rapid deployment offer- 
ing for its EnterpriseOne mid- 
market ERP applications, adding 
support for Intel-based servers 
and its fixed-time, fixed-cost in- 
stallation framework. 


CFO Can Automate 
ClO Watchdog Tool... 


the first quarter 2005, when Centrata Inc. Red- 
wood City, Calif., plans ship Version its Service Cata- 
log, which will add analytics specifically for chief fi- 
nancial officers sniff around project metrics 
ensure that CIOs are properly serving business units 
and the overall company. That might seem down- 


right harsh you CIOs 

who are the primary users 

today’s 3.0 version the 
software. After all, you’ve 
shelled out somewhere be- 
tween million and $3.5 mil- 
lion for the Centrata Service 
Catalog standardize and 
automate the delivery 
services business units and 
manage projects from cradle 
grave. company divi- 
sion needs new mail server, 
business unit manager 
opens Service Catalog, de- 
cides what wants, then out 
spits detailed “statement 
work,” which Centrata CEO 
Venkat Raju claims more 
detailed than your everyday 
request for proposal. Not only 
does the statement include 
the basic RFP specifics 
hardware, software and labor 
costs, but also covers com- 
mitments deployment 
schedules, long-term support 
and even end-of-life projec- 
tions and costs. The whole 
shebang. Next year, your CFO 
will get raft metrics based 
Service Catalog see 


claim. course, you could 
always skip the upgrade. 


Beta work leads 


for Lowe 
Enterprises 
Inc., Los An- 
geles-based 
national real 
estate devel- 
oper. Keith 
Fletcher, se- 
nior vice pres- 
ident for in- 
formation sys- 
tems, says 
got “an early, 
early beta” 
Microsoft Of- 
fice System and put into 
production. Daring? Crazy? 
Would you that with Mi- 
crosoft product? Maybe you 
should. Fletcher says that 
the time Microsoft 
finally released the 
product last year, 
was already saving 
around $100,000 just re- 
ducing the number Ex- 


MATTHE 


The OneSign appliance from 


change servers needed. More 
important, was able roll 
out custom application 
quickly his real estate ac- 
quisition team. Each land 
deal, says, runs the 
range $20 million 

$30 million. With the cus- 
tomization his staff did with 
Office System, Fletcher says 
the company can probably 
handle two three more 
deals year because better 
information management and 
access. this summer, 
says, another customized ap- 
plication will ready for all 
real estate man- 
agers. There are downsides 
depending product still 
beta, though. “We had 
final documentation until 
after Microsoft shipped” the 
final release, says. more 
subtle problem, Fletcher 
points out, that end users 
haven’t heard about the new 
product the media 
word mouth, lacks 
validation their minds. 
“You have sell harder in- 
ternally,” advises. The up- 
side? “We’re way ahead the 


competition,” Fletcher claims. 


Once more 
than 

when you need sign 
onto your company network 
and all your applications, 
you use the OneSign appli- 
ance from Imprivata Inc. 
Lexington, Mass. The rack- 
mounted device uses the pro- 
prietary Application Profile 
Generator (APG), which 
learns each and every pack- 
aged, custom Web app’s 
access process and combines 
that information with your 
user-rights profiles Active 
Directory other LDAP di- 
rectories identify and au- 
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HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY GOSSIP MARK HALL 


thenticate users. You simply 
load lightweight client 
users’ PCs and let them log 
into their applications once, 
and the APG takes over for 
every subsequent log-on proc- 
ess. Version the software 
adds shared workstation fea- 
tures for multiple users and 
will available next week. 
Pricing starts $20,000. 


Get out your car and 


maybe conduct little 
official business online 
joining Raindance Communi- 
cations Inc.’s Earth Day effort 
this week cut back the 
250 million hours per month 


The EPA estimates that 


million 
gal 


will saved the 
1.35 million workers who 
its Best Work- 
places for Commuters program. 


that white-collar workers 
waste driving and from 
local meetings. And you can 
join for free April 22, Earth 
Day, being among the first 
1,000 companies sign 
for the Louisville, Colo.- 
based vendor’s Raindance 
Meeting Edition for Web, au- 
dio and multipoint videocon- 
ferencing. Chief Marketing 
Officer Brian Burch says ser- 
vices like Raindance’s are 
widely used cut down 
interstate travel and hotel 
costs. However, what he calls 
“the hidden commute” lo- 
cal white-collar business trips 
not only expensive and 
time-wasting, but it’s bad for 
the air, too. According the 
Environmental Protection 
Agency, its Best Workplaces 
for Commuters program an- 
nually saves mil- 
lion gallons gas 
and cuts 2,000 tons 
nitrous oxide and 
500,000 tons car- 
bon dioxide from the 
skies. So, get online and 


off the road. 46230 
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Sue Simonett 
Senior Director 


General Mills, Inc. 
Minneapolis, Minnesota 


Sue Simonett has always worked Information 
Systems (IS), career she loves both for the 
strategic view has afforded well the abil- 
ity positively impact the lives end users. 


Recently charged with reinventing the way that 
sales force 450 retail reps managed their 
numerous product lines, she’s implemented 
ingenious handheld system that brings technol- 
ogy the front lines the company. 


Using stylus and handheld mobile device, 
sales reps now electronically record product 
information while the store. Gone are the 
days messy paper logs and evenings spent 
keying the data into laptop for down- 
loading corporate. the end each day, 
the rep simply places the device and 
the data sent directly from the handheld. The 
results: sales reps that can handle more prod- 
ucts with fewer errors, and get the right prod- 
ucts the right shelves faster. 


Great Moment Work: “My first warehouse 
“Our goal information systems management system, start-up day. designed 
behind organization more efficient top notch system that totally reengineered 


than when arrived.” Sue Simonett the business and was really gratifying when 
everything fell right into place.” 


Microsoft Office System salutes those who 
have done great work the field. 


Great Moments Work. 


@ 


Office 


© 2004 Microsoft Corporation. All rights reserved. Microsoft and the Office logo are either registered trademarks or trade- 
marks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products 
mentioned herein may be the trademark of their respective owners. 
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Microsoft Says Considering 
Changes Longhorn 


Major new features remain intact; 
operating system beta due next year 


CAROL SLIWA 
ICROSOFT CORP. 
confirmed last 
week that it’s 
evaluating fea- 

tures and functional scenarios 

that might scaled back 
the next major Windows re- 
lease, code-named Longhorn. 
But Greg Sullivan, lead 
product manager Micro- 
Windows client group, 
said the company looking 

“fairly features” and 

has plans make signifi- 

cant changes the Longhorn 
vision that out last Oc- 


opers Conference (PDC). 
“The normal part any de- 
velopment process looking 
the project end end and 
prioritizing features and sce- 
narios and capabilities,” Sulli- 
van said. “That’s the process 
with Longhorn now.” 
Microsoft distributed de- 
veloper preview edition 
Longhorn the PDC, and the 
company plans refresh the 
developer preview for those at- 
tending next month’s Windows 
Hardware Engineering Confer- 
ence Seattle, according 
Sullivan. said Microsoft will 
also provide updated guidance 
WinHEC, although the Long- 
horn review process will con- 
tinue after the event, since the 


Correction 

the chart page last 
issue, some figures for 
maximum memory supported 
were incorrect. For the AMD 
Opteron and the FX, 
and for the the 
correct figure 16GB per CPU 
(using current 4GB DIMM tech- 
nology), with theoretical limit 
per CPU. addition, 
Sun UltraSparc CPUs can indeed 
run 32-bit applications. 


first beta isn’t due for months. 


the PDC, Microsoft said 


the first beta Longhorn was 
expected the second half 


this year. The date for the beta 
release now pegged for the 
first half next year, Sullivan 
confirmed. “The final release 
really will determined 
the customer feedback get 
and when the product meets 
the quality standards our cus- 
tomers require,” added. 
During last month’s Gartner 


Symposium San Diego, Bill 


Gates, Microsoft’s chairman 


and chiet software architect, 
tober its Professional Devel- 


said Longhorn “not date- 
driven release.” But also ac- 
knowledged that 2006 re- 
lease date “probably valid 
speculation.” The company 


Hackers Breach Research Systems, But Data Kept Safe 


BY PAUL ROBERTS 
AND TODD R. WEISS 


recent weeks, malicious 
hackers have infiltrated sys- 
tems various U.S. universi- 
ties that operate scientific re- 
search high-performance 
computing centers. But sever- 
schools said none their 
data was compromised. 
Stanford University, the 
University California, San 
Diego, and the University 
Illinois Urbana-Champaign 
confirmed last week that sys- 
tems their campuses had 
been broken into. The attacks 
forced the schools change 
user passwords and take some 
computers off-line patch se- 
curity holes that were used 
gain access the systems. 
Sangtae Kim, director the 
Division Shared CyberInfra- 
structure the National Sci- 
ence Foundation Washing- 
ton, said the federal agency 
believes the attacks the U.S. 
were part much larger ac- 


earlier last year had said the 
product would ship 2005. 
Microsoft spokesman 
confirmed last week that the 
target date” for the 
Longhorn client operating sys- 
tem the first half 2006, 
but quickly added that the 
ship date isn’t nailed down. 
Longhorn has three major 
components. Avalon the 


tion that affected high-perfor- 
mance systems worldwide. 

Some the U.S. facilities 
that were affected are part 
NSF-funded network called 
TeraGrid, which links high- 
end systems different sites. 
The intruders were able ac- 
cess TeraGrid hardware 
least one location, according 
NSF spokesman. 

The San Diego Supercom- 
puter Center, TeraGrid 
member the University 
California campus that city, 
said statement posted 
its Web site April that in- 
truder had gained access 
number” its systems over 
four-day period. 

But the intruder was quickly 
detected and monitored, the 
center added. noted that 
uses “defense depth” ap- 
proach that hides critical data 
under multiple security layers. 
result, the intrusions 
were just “inconvenience,” 
spokeswoman said. 


SOURCE: STANFORD UNIVERSITY'S IT SYSTEMS AND SERVICES GROUP 


code name for new presenta- 
tion system featuring unified 
hardware-accelerated graphics 
programming model for video, 
animation and 2-D and 3-D 
graphics. Indigo the com- 
munications infrastructure 
and programming model for 
building advanced service-ori- 
ented applications. WinFS 
the new storage subsystem 
Sullivan said that under 
the current system, files are 
stored folders that are sub- 
directories the hierarchical 
file system. With ob- 
jects and the relationships be- 
tween them will stored, and 
each object the store will 
have XML-based metadata as- 
sociated with users can 
search, find and act the in- 
formation more flexible 
and powerful way, said. 
Sullivan said it’s possible 
that elements the three ma- 


Stanford’s Systems and 
Services group also posted 
security alert, warning end 
users the school about intru- 
sions into multiuser systems 
running Solaris and Linux. 

The university’s staff be- 
came aware the intrusions 
after users noticed discrepan- 
cies the times their last 


Tips for protecting 
systems against 
network intrusions 
Install all security-related 
operating system patches. 


Make sure end users 
passwords that are hard crack. 


Use different passwords all 
root-level accounts. 


Use Secure Shell software 
with RSA keys Kerberos tech- 
nology authenticate users. 


Limit remote access un- 
patched multiuser systems via 
firewalls other approaches. 


www.computerworld.com 


jor Longhorn subsystems 
might scaled back, but 

characterized potential 
changes “little things.” 
said the product scoping proc- 
ess involves “low-priority 
marginal features that may not 
make the cut.” 

Business Week Online recent- 
claimed that Microsoft 
plans cut some the most 
far-reaching pieces Long- 
horn and reported that the 
current plan calls for the new 
file system work PCs but 
not extend files shared over 
corporate network. Business- 
Week said based the infor- 
mation two Microsoft 
e-mail messages obtained. 

“There’s degree speci- 
ficity there that didn’t arrive 
reading the same internal 
communication,” Sullivan said. 
added that it’s too soon 
say what the enabled scenar- 
ios will will not be. “WinFS 
was never designed way 
index the Internet,” said. 
looking various ways 
that corporate data across cor- 
porate intranets can ex- 
posed enable users inter- 
act with that data.” 46244 


reported log-ins. The alert 
said other systems began per- 
forming poorly erratically 
after the intruders installed 
so-called rootkits, which are 
programs that allow hackers 
disguise their presence and 
gather information such 
user names and passwords. 
The attackers gained access 
systems sniffing pass- 
words from unsecure network 
traffic, such Telnet remote 
communications sessions, 
reading password files 
infiltrated systems, according 
the alert. Then they looked 
for other systems that lacked 
up-to-date security patches. 
Stanford spokesman said 
the attackers infiltrated about 
computers but caused 
damage loss data. “They 
got in, they were annoying, 
but [the systems] were not 
affected,” said. 46256 


Roberts reporter the IDG 


News Service. 


LONGHORN FEATURES 
Communications 
ture and programming 
for building advanced 
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Call 
Nomin 


For these 

were asking 


Computerworld’s 


nominate the 
vendors they believe offer leading-edge 
technology products services that 
provide business value customers. 


Using Hot Technology with Real Business Value? Nominate your 
vendor for Innovative Technology 2004 Awards 


Eligible Nominees 


Innovative Technology awards 
are “customer choice,” which means Computerworld 
asking those companies that use technology (but don’t 
produce sell it) nominate vendors. The awards are 
devoted identifying truly breakthrough technology 
from vendors with histories those new the indus- 
try and showcasing how leading organizations are using 
this technology achieve business payback. 


Evaluation Results 


From May June 14, 2004, Computerworld will survey 
those vendor nominees about their applica- 
tions. panel outside experts and Computerworld edi- 
tors will then review the surveys and choose the winners. 
Survey results and stories that offer practical advice from 
leaders using these technologies will published the 
September 13, 2004 issue Computerworld, well 
Computerworid.com. 


Nominate online www.computerworld.com/research/innovativetech 
from now through May 10, 2004. Questions? Contact innovativetech@computerworld.com 
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Oracle Review Put 
Hold Europe 
The European Commission said 
its antitrust review Oracle 
Corp.’s hostile bid buy People- 
Soft Inc. has been put hold 
while officials seek more informa- 
tion from Oracle. The commission 
dropped May deadline for 
deciding whether will seek 
block takeover PeopleSoft; 
was the second time has post- 
poned the ruling this year. Oracle 
said will respond the request 
for more information “as quickly 
possible.” 


IBM Says Profits, 
Sales Rose 


IBM reported $1.6 billion profit 
revenue $22.2 billion for 
the first quarter, with its ser- 
vices unit accounting for half 
total sales. Net income was 
16% year over year, and revenue 
rose 11%. John Joyce, IBM’s 
chief financial officer, said during 
conference call that mainframe 
sales rebounded after the compa- 
reinstated more aggressive 
pricing those systems. 


Microsoft Settles 
Lawsuit 


Ten days after resolving its long- 
running legal fight with Sun 
Microsystems Inc. [QuickLink 
45957], Microsoft Corp. said 
agreed settle patent infringe- 
ment lawsuit filed three years ago 
InterTrust Technologies Corp. 
part the deal, Microsoft will 
pay $440 million license Santa 
Clara, Calif.-based InterTrust’s 
portfolio patents digital 
rights management technology. 


Short Takes 


IBM said plans buy Schlum- 
berger Ltd.’s London-based busi- 
ness continuity services unit for 
undisclosed price. EMC 
CORP. reported first-quarter 
profit $139.8 million, from 
$35.2 million year earlier. Total 
revenue was $1.87 billion. The 
storage vendor also raised its 
second-quarter forecast. 


MySQL Plans Clustering ‘Tool 


Add-on will let users distribute 
open-source across multiple servers 


MARC SONGINI 
OOKING boost the 
reliability and avail- 
ability its open- 
source database, 

MySQL last week said 

plans add clustering support 

the software later this year. 

its user conference Or- 
lando last week, MySQL pre- 
viewed the MySQL Cluster 
feature, promoting low- 
cost way boost database up- 
time while ensuring that users 
can fail over backup servers 
system crashes. The Upp- 
sala, Sweden-based company 
said MySQL Cluster will sup- 
port “five 9s” database avail- 
ability through the use 
parallel server architecture. 

Zack Urlocker, 
vice president marketing, 
emphasized that the open- 
source vendor isn’t position- 
ing itself compete directly 
with enterprise-class databas- 
from vendors such Ora- 
cle Corp. and IBM. 

“Those are very mature 
products that have all the fea- 
tures you can ever imagine,” 
said. “Think those the 
Ferraris, while providing 
the Honda database for core 
functions with extreme relia- 
bility low cost.” 

MySQL Cluster due the 
third quarter add-on 
the company’s namesake data- 
base. The clustering tool will 
let users distribute MySQL 
databases over multiple ma- 
chines and manage them 
they were single system. 
Any changes one server 
the cluster will automati- 
cally synchronized the oth- 
machines through data 
replication, MySQL said. 

The clustering feature 
would probably most use- 
ful for companies running 
heavy-duty Web applications, 
said Carl Rubin, principal 
Evidata Solutions, Newton, 
Mass.-based database consul- 
tancy that uses MySQL 
store customer information. 


For Evidata itself, Rubin 
more interested other en- 
hancements that are coming 
Version 5.0 MySQL, which 
was announced January and 


scheduled ship the sec- 


ond half the year. cited 
promised enhancements such 
support for stored proce- 
dures and the ability auto- 
matically join database tables. 
least initially, most 
MySQL users probably won’t 
need advanced capabilities 
like clustering, said Charles 
Garry, analyst Meta 


MySQL 


THROUGHPUT: 100,000 replicat- 
transactions per second 
four-node cluster low-end 
servers, each with two CPUs 


CLUSTER SIZE: eight 
nodes via Gigabit Ethernet; larger 
configurations require dedicated 
cluster interconnect 


SUPPORTED OPERATING 
SYSTEMS: Windows 2000/XP, 
Red Hat Linux, SUSE Linux, AIX, 
HP-UX, Solaris, Mac 


PRICING: Free for use open- 
source projects; under $5,000 
per CPU for commercial users 


Group Inc. But the clustering 
tool and other enhancements 
will remove “technical road- 
blocks” for companies that 
want invest open- 
source database, Garry added. 

MySQL Cluster will become 
available first with the exist- 
ing MySQL 4.0 database. Pric- 
ing for the clustering tool 
wasn’t disclosed, but MySQL 
said commercial licenses will 
cost less than $5,000 per CPU. 

the conference, MySQL 
also previewed MySQL 5.0 and 
new graphical user interface, 
MySQL Administrator, that 
will replace its existing com- 
mand-line interface [Quick- 
Link 44191]. 46252 


Seattie Mariners Shut 


JAIKUMAR VIJAYAN 
With 2-7 record this writ- 
ing, the Seattle Mariners have 
lot problems deal with 
these days. 

But spam isn’t one them. 
Not now, anyway. 

Until about three months 
ago, more than 20% the 
roughly 60,000 e-mails the 
Mariners received weekly were 
either junk mail viruses. For 
some e-mail accounts, the per- 
centage was high 95%. 

“Employees were being 
asked manually delete each 
bad e-mail, which cost both 
time and money,” said David 
Curry, director for the 
baseball team. “In addition, 
were relying solely the in- 
tegrity the users’ local anti- 
virus client protect the net- 
work from [e-mail-based] 
viruses.” 

The situation threatened the 
team’s ability respond 
fans electronically. Janu- 
ary, the Mariners deployed 
spam-blocking and antivirus 
software from Computer As- 
sociates International Inc. 

eTrust Secure Con- 
tent Manager software sifts 
through HTTP, e-mail and file 
transfer protocol traffic look- 
ing for and blocking inappro- 
priate e-mail and Web content. 


The software allows Curry 
define policies for what type 
content acceptable. 

The software was installed 
during the height the My- 
doom virus outbreak late 
January and blocked 20,000 
infected e-mails during that 
first weekend, Curry said. 
“We’ve had zero infections 
since then,” claimed, and 
spam has dropped 95%. 

Spam-blacking technologies 
are becoming increasingly ef- 
fective, said Jim Hurley, an- 
alyst Boston-based Aber- 
deen Group Inc. “It’s becom- 
ing more manageable is- 
sue” through the use block- 
ing technologies, said. 


the 


Out Spam 


Boscov’s Department Store 
LLC Reading, Pa., uses 
products from Cisco Systems 
Inc. and Symantec Corp. 
block nearly 98% the e-mail 
traffic receives. 36,000 
messages reviewed recently, 
fewer than 800 were accepted 
legitimate and delivered, 
said Joe Poole, the retailer’s 
manager for technical support. 
The technology has done 
“excellent job,” added. 

46258 


MORE SPAM COVERAGE 


For related stories, visit our spam special 
coverage page: 


QuickLink 
www.computerworld.com 


ity communicate with fans 


touch with the team via e-mail when they're Safeco Field. 
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2:01AM HOTEL 2:11AM 
WORM ENTERS ROOM 536 2:28AM 
WORM EVACUATED NETWORK 
ORDER GRILLED CHEESE 
AND FRIES 2:35AM DOZE OFF 


Your mobile workforce. An army of productivity or multiple points of entry ripe for intruders? Enter the self-defending network, with integrated security woven throughout. A line of 
defense that delivers security where security is needed. Wherever you do business. Inside the intranet. Outside the intranet. Across the Internet. Even in hotel rooms on the other 


side of the planet. So your jet-lagged mobile workers stay safe and secure. And your business keeps marching forward. To learn more about how Cisco can help plan, design and 
implement your network security, visit cisco.com/securitynow. SELF-DEFENDING NETWORKS PROTECT AGAINST HUMAN NATURE. 


Cisco SYSTEMS 


THIS THE POWER THE NETWORK. NOW. 


2004 Cisco Systems. inc. Ail rights reserved. Cisco, Cisco Systerns, Cisco !OS, and the Cisco Systems logo are registered trademarks 
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Supersize 
Use Wi-Fi Connections 


Will offer customers wireless services, 
tap Wayport net for cashless payments 


BOB BREWIN 

CORP. 

last week an- 

nounced plans 

install public- 
access Wi-Fi connections 
6,900 restaurants 
But the fast food chain said its 
Wi-Fi services deal with Way- 
port Inc. goes far beyond pro- 
viding wireless Internet ac- 
cess to customers. 

McDonald’s will also use 

the Wi-Fi network deliver 
wide range digital content, 
including MP3 music files, and 
support business applica- 


tions such its cashless pay- 
ment system, said Jim Sap- 
pington, the company’s vice 
president IT. 

Austin-based Wayport plans 
install high-speed DSL con- 
nections 3,000 McDonald’s 
restaurants this year and an- 
other 3,000 next June. Way- 
port CEO Dan Vucina said the 
cashless payment system, 
which supports credit card 
transactions cash registers 
and drive-up windows, will 
separated from the public- 
access network and operate 
virtual LAN each store. 


Cashless payments require 
minimal amount band- 
width, Vucina said. But Way- 
port will use internally devel- 
oped software ensure that 
credit card transactions get 
priority access DSL circuits 
and that single application 
hogs the network connections. 


Bandwidth 

The so-called bandwidth- 
shaping software consists 
about 700,000 lines Linux 
code and runs Wayport- 
designed router/gateway that 
will installed each Wi-Fi 
hot spot, said Jim Keeler, Way- 
port’s vice president engi- 
neering. The hardware device 
will manage the wireless 


content customers 


LANs well the Wi-Fi traf- 
fic and from the DSL net- 
work connection, Keeler said. 
McDonald’s also plans 
use the network distribute 
employee training videos 
restaurants, Wayport said. 
The digitai content McDon- 
ald’s will deliver via the Wi-Fi 
setup includes MP3 files and 
digitized versions newspa- 
pers and magazines. Wayport 
letting users download pub- 


Downsized Plan Yields Better 
CPU Road Map, Sun Exec Says 


ROBERT McMILLAN 
IDG NEWS SERVICE 

part downsizing an- 
nounced earlier this month, Sun 
Microsystems Inc. stopping 
development its UltraSparc 
processor and device called 
Gemini for low-end servers 
[QuickLink 46146]. David 
Yen, Sun’s executive vice 
president processors, 
enterprise systems and 
low-end Sparc servers, 
last week spoke with the 
IDG News Service about 
the decision put all 
the company’s processor 
resources into multicore 
chips that can process 
multiple software threads simul- 
taneously, approach that Sun 
calls “throughput computing.” 


How did you arrive the decision 
terminate Gemini and Ultra- 
Sparc Well, the quick com- 
ment is, people should have 
doubt about our belief and our 
vision the throughput com- 
much that wanted focus 


all our resources trying 
expedite its development. 

did spend quite some 
time working 
and Gemini. There was re- 
ally nothing wrong with those 
processors. actually taped 
out both them, and Gemini 
even reached the point 
where the chip was ful- 
working. But the 
Gemini space, have 
and 
traSparc that are 
doing very capable 
job. the [UltraSparc] 
space, with the current 
UltraSparc IV, followed 
the IV+, 
and then with the upcoming 
Rock and Niagara [multicore 
devices], actually believe 
that this probably better 
road map. 


Does the decision cancel Gemi- 
and UltraSparc move the 
ship dates for Rock and Niagara? 
definitely helps, because 
are moving significant num- 
ber people who now 


had been working Ultra- 
Sparc work the Rock 
and Niagara family. 


When you now expect those 
two processors ready? 
have said Niagara that’s 
our first Niagara chip will 
happen probably the very 
beginning 2006, and the 
subsequent members the 
Niagara family and the Rock 
chip will follow that. 


But you said that last year. How 
has the road map changed re- 
sult the decision UltraSparc 
and Gemini? certainly will 
secure the schedule, if not 
help move earlier. 


What does this mean for the fu- 
ture UltraSparc? that product 
line know dead, will 
there future proc- 
essors? All these throughput 
computing processors are 
Sparc-compatible. Whether 
will continue using the 
name not, that’s 
separate decision. But these 


are every bit Sparc processors. 
When one them comes out, 
may label that one 
continue the se- 
quencing, that’s still the way 
want name them. 


You now have relationship with 
Advanced Micro Devices for its 
Opteron chip. Would you consider 
using another type core archi- 
tecture place Sparc you 
design new multicore processers? 
will working closely 
with AMD Opteron-based 
Sun systems. However, please 
understand that have 
more than $127 billion in- 
stalled base [on Sparc technol- 
ogy]. Sun’s obligation 
maintain binary compatibility. 
This one contract Sun 
considers very seriously. 
But you’re right, the whole 
computing] inno- 
vation does not necessarily tie 


you eventually expect 
base throughput computing proc- 
essors systems AMD’s tech- 
nology? could happen, but 
this particular case, involves 
[working with] AMD. There- 
fore, until are ready and 
both agree, cannot comment 
that. 46213 


lications such USA Today 
and BusinessWeek PDF files 
during tests the Wi-Fi ser- 
vice McDonald’s various 
metropolitan areas. 

reduce network band- 
width demands, Wayport 
plans cache music files 
the in-store router/gateways, 
which are equipped with 
40GB hard drives. The Wi-Fi 
network could also used 
distribute movie trailers 
customers tie-in the 
movie-based meal promotions 
McDonald’s runs, Vucina said. 

Vince Howell, the owner 
McDonald’s franchise Las 
Vegas, N.M., said Wi-Fi could 
drive more traffic his res- 
taurant. Howell gets about 40% 
his business from Interstate 
travelers, and thinks 
wireless capabilities would en- 
tice people with laptops that 
support Wi-Fi links choose 
his restaurant instead near- 
fast food rivals. 

Wayport will offer two-hour 
Wi-Fi sessions cost $2.95 
per hour, addition other 
pricing options, such 
$29.95-per-month unlimited 
service plan for its nationwide 
network, which currently 
available 700 hotels and six 
major airports. Pricing for the 
MP3 content hasn’t been set. 

Amy Cravens, analyst 
In-Stat MDR in Scottsdale, 
Ariz., said fee-based Wi-Fi 
services like the one Mc- 
Donald’s need differentiate 
themselves from free services 
“either the quality the 
connection applications.” 
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MORE THIS ISSUE 


Frankly Speaking: Frank Hayes says 
other companies could learn from the Wi-Fi 
installations at McDonald's. Page 52 
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Visual 2003 can cut development time 
two-thirds, giving you more time think. 


Got big idea? Visual .NET 2003 delivers higher 
productivity, helping you turn that big idea into reality 
faster than you ever thought possible. Want proof? 
Visual Studio Xerox Global Services 
bring the v2.0 release its CentreWare Web software 
market one-third the time compared their 
previous development find out how Visual 
Studio .NET 2003 can help you quickly turn your big 
ideas into reality, visit 


Visual Studio 
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VSX 3000 


Polycom Inc. 


PRODUCT SUMMARY: 
Pleasanton, Calif.-based Poly- 
com announce the VSX 
3000 The device 
high-end desktop videoconfer- 
encing system that combines 
camera, microphone, speakers, 
required software and other 
components with display 
that can double monitor. 
Polycom said the system sup- 
ports H.264 video compression, 
which produces much sharper 
images than products based 
the H.263 standard while 
utilizing half the bandwidth. 


USER EXPERIENCE: Beta 
tester Dave Christensen, senior 
videoconferencing specialist 
the headquarters the Church 
Jesus Christ Latter-day 
Saints Salt Lake City, de- 
scribed the VSX video 
and sound quality “excep- 
tional” and comparable that 
aroom-size videoconferencing 
system. But price nearly 
$5,000, the VSX 3000 also 
costs about much room- 
size unit, Christensen said. The 
church hasn't decided whether 
will buy any, added. 


ANALYST ASSESSMENT: 
The VSX 3000 fills hole Poly- 
product line, said Andrew 
Davis, analyst Wainhouse 


Polycom Adds Desktop 
Videoconferencing System 


Research LLC Brookline, 
Mass. Polycom made earlier at- 
tempts crack the market for 
executive-class desktop sys- 
tems, but none were successful, 
said. “This for the status- 
conscious end the market,” 
Davis added, predicting that the 
ability use single monitor for 
both and videoconferencing 
purposes will help sales the 
VSX 3000. 


OTHER VENDORS THE 
MARKET: Tandberg ASA and 
Sony Corp.; Cisco Inc. 
plans ship desktop video- 
conferencing system midyear. 


PRICE: The VSX 3000 starts 
$4,999. 


fourth quarter, Polycom plans 
add optional feature that will 
support data sharing during 
videoconferencing calls. 

Matt Hamblen 


Continued from page 
H-1B 


Sun Microsystems Inc. 

This year’s cap 
65,000 was reached mid- 
February, less than five 
months after the start 
the federal fiscal year. 
Smith’s bill, the American 
Workforce Improvement and 
Jobs Protection Act, wouldn’t 
raise the cap, but would ex- 
empt from that limit 
20,000 graduates with mas- 
ter’s degree higher from 
U.S. university. 

Students hired universi- 
ties and research institutions 


under the H-1B program are 
already exempt from the cap. 

Most the that U.S. 
companies are hiring “are 
coming out our own 
schools,” said Thom Stohler, 
vice president the American 
Electronics Association, 
Washington-based trade 
group that has called for 
higher H-1B cap. Businesses 
“are not going Bangalore 
find people; they are finding 
them here,” said. 

the position the AEA 
that individuals who possess 
master’s Ph.D. degree are 
not stealing American jobs; 
they are creating American 
jobs,” said Stohler. Holders 


Continued from page 


Best Buy 


she said. 

The agreement isn’t yet 
done deal, but it’s nearing 
completion, said Bryant. 

Based information that 
has been publicly disclosed, 
the Best Buy deal appears 
differ from some other retail 
outsourcing contracts, includ- 
ing the 10-year agreement that 
Sears, Roebuck and Co. ne- 
gotiating with Computer Sci- 
ences Corp. 

the second quarter, Sears 
hopes finalize deal, esti- 
mated worth billion, 
that calls for CSC manage 
much its infrastructure. 
About 260 the retailer’s 
1,160 workers are expected 
to be affected, but Sears has 
said expects CSC hire 
nearly all those staffers. 


Testing the Waters 

John McCarthy, analyst 
Forrester Research Inc. 
Cambridge, Mass., said most 
large retailers are doing some 
experimenting with outsourc- 
ing and offshoring they try 
beef technology initia- 
tives low budgets. But com- 
panies typically outsource 
only selected commodi- 
tized piece IT, such the 
infrastructure maintenance. 
“What Best Buy doing 
unique, and it’s unique most 
industries,” said. “Most 
companies don’t necessarily 


advanced degrees tend 
employed research and de- 
velopment work, said. 

Under U.S. immigration law, 
companies were allowed 
begin applying this month for 
visas that will issued 
the start the 2005 fiscal 
year. Vic Goel, immigration 
attorney Greenbelt, Md., 
said expects that there will 
enough applications be- 
tween now and Oct. ex- 
haust next year’s cap 65,000 
visas. said the period for 
issuing new visas that 
will begin Oct. could 
close the next day. 

Any increase the number 
visa holders will face 


SOURCE AMERICAN SOCIETY OF ENGINEERING EDUCATION 


want get rid all IT.” 

Accenture, however, noted 
that the potential Best Buy 
arrangement isn’t unprece- 
dented. late 2000, London- 
based grocery chain Sains- 
bury PLC signed seven-year 
deal outsource its entire 
operation Accenture and 
claimed expects save 
about $50 million per year. 
Sainsbury transferred about 
800 employees Accenture 
and retained small in-house 
staff oversee the company’s 
strategy and manage the 
Accenture contract. 

“Sainsbury and Best Buy are 
very much focused con- 
tracting for bottom-line busi- 
ness results, and they believe 
they can achieve that 
more holistic outsourcing re- 
lationship, rather than out- 
sourcing bits and pieces,” said 
Angela Selden, managing part- 
ner Accenture’s North 
American consumer and in- 
dustrial practice. 

Selden said retailer can 
hold third-party provider ac- 
countable with combination 
service-level agreements 
and business outcomes that are 
written into the contract. The 
outsourcer, turn, makes sure 
resources are focused what- 
ever delivers the most business 
benefit the retailer, she ex- 
plained. “Service-level agree- 
ments rarely exist between in- 
ternal organizations and 
their business counterparts,” 
Selden said. 

She said many retailers have 


opposition from labor groups, 
especially the IEEE-USA, a 
unit the Institute Electri- 
cal and Electronics Engineers 
Inc. Washington that says 


master’s 
degree 
recipients 


recipients 


capable leadership teams, 
but the pace which third 
party with expertise can 
make changes could make out- 
sourcing attractive retailers 
that are saddled with older 
proprietary heavily cus- 
tomized systems manage 
their businesses. “Retailers are 
very disadvantaged today be- 
cause this archaic infra- 
structure,” Selden said. 

Accenture advocates taking 
“packaged vanilla solutions 
and weaving them together 
simple fashion possi- 
ble” and changing business 
processes, rather than heavily 
customizing software, the 
most cost-effective approach 
for retailers, Selden said. 

Selden said she recognizes 
that the approach would rep- 
resent dramatic change for 
the legions retailers that 
claim they had heavily cus- 
tomize systems because the 
unique needs their busi- 
nesses. But she said they must 
change the way they busi- 
ness order nimble 
enough “absorb innovation 
quickly.” 

In September, Plano, Texas- 
based Electronic Data Systems 
Corp. announced multiyear 
contract with Best Buy pro- 
vide help desk and problem 
management services its 
stores and corporate users. 

Spokeswomen for both Best 
Buy and EDS said the Best 
Buy-EDS contract 
affected the Accenture 
deal. 46253 


its members are facing record 
unemployment levels. 

“We question the need 
new visa exemption,” said 
IEEE-USA President John 
Steadman, who noted that for- 
eign graduate students can al- 
ready work for two years in 
the U.S. under existing visa 
rules. “During that time, the 
company can evaluate their 
skills and petition for green 
card their behalf,” said. 

The bill’s prospects are un- 
certain. The co-sponsors are 
all Republican, and this 
contentious year for outsourc- 
ing. But Congress has acted 
before increase the 
cap election years. 46257 
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Offshore Moves Can Bring 


Users cite savings potential and better 
flexibility, warn internal challenges 


LINDA ROSENCRANCE 
NEWTON. MASS 

first, offshoring sit 
well with Dave Andre, chief 
technology officer Upromise 
Inc. But economic realities ul- 
timately forced him send 
some work overseas. 

“Our primary objective was 
save money,” Andre said 
during panel discussion 
offshore outsourcing 
Massachusetts Software 
Council meeting here last 
week. “We were hoping 
have secondary benefits, but 


didn’t save money, 
wasn’t worth going forward.” 
Upromise offers free ser- 
vice that lets families earn 
money for college when they 
make purchases from affiliat- 
stores, restaurants and on- 
line retailers; also operates 
college savings investment 
fund. late 2002, the Need- 
ham, Mass.-based company 
began outsourcing some soft- 
ware development and sys- 
tems administration work 
Wipro Ltd., which now has 
about staffers Bangalore, 


Benefits, but Not Without Pain 


India, assigned Upromise. 
Andre disclose 


specific figures, but said 


Upromise shaved its bud- 
get 10% 20% the first 
year the offshore contract 
and expects more savings 
the future. “The cost savings 
are real,” said. 

Some the secondary ben- 
efits that Upromise has gotten 
include round-the-clock 
operation with “follow the 
sun” development and quality- 


assurance capabilities, better 


internal development process- 
and increased staffing flexi- 
bility, Andre noted. 

But acknowledged that 
the offshore move has also re- 


sulted some painful experi- 
ences, such the need lay 
off staffers the U.S. 
“Transitions are hard work,” 
Andre said. “If had 
again, would start from Day 
with offshore outsource 
model.” follow-up inter- 
view, said switching 
offshore approach “causes 
angst your employee base, 
and causes angst you.” 
Upromise also outsourced 
some call center functions 
Daksh eServices Pvt., busi- 
ness process outsourcing firm 
Gurgaon, India, that’s being 
acquired IBM. Andre said 


the two taught Upromise 


executives that communicat- 
ing with employees about off- 
shoring plans important and 
that offshore training needs 
and overhead costs will likely 
larger than expected. 
Swapnil Shah, the CEO 


Introducing It’s all the integrated, expandable network 
security your company really needs. All inside one intelligent box. 


mValent Inc., software ven- 
dor Tewksbury, Mass., said 
his company’s approach off- 
shore outsourcing was cre- 
ate parallel engineering teams 
the U.S. and India. That en- 
ables the engineering staff 
work 18-hour day, said, 
adding that the offshore strat- 


egy has resulted lower costs 
and faster time market. 
Choosing business partner 
with the requisite technical 
skills was critical, Shah said. 
Sandeep Swadia, head 


marketing Virtusa Corp., 
software developer and IT 
services provider Westboro, 
Mass., agreed. “There are dif- 
ferent horses for different 
courses, and you have pick 
the right one for the right job,” 
said. “Make sure their vi- 
sion matches your vision. The 
focus just can’t cost.” 
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MARYFRAN JOHNSON 


Disaster Homework 


OME MONTHS AFTER the attacks, 
interviewed the CIO large Wall Street 
law firm located only blocks from the col- 
lapsed World Trade Center towers. She 
talked about the tremendous outpouring 
sympathy and concern from hundreds the at- 
torneys’ clients the hours after the disaster. 


Then Day dawned, 
and the story changed. 
The clients who called 
wanted reassurances that 
their files were safe and 
that business would 
promptly get back 
track. remember being 
shocked the self-cen- 
tered attitude those 
demanding customers. 
But was reminder 
that even major disas- 
ter has short shelf life 
excuse the business world. 
What matters most the speed and 
effectiveness recovery. 

it’s odd that nobody likes 
talk about disaster recovery. Ven- 
dors use euphemisms like “business 
continuity” avoid those two scary 
words. Companies give lip service 
how important such planning 
but then fail fund programs 
test their own disaster plans. 

recently surveyed profes- 
sionals from companies with disaster 
recovery plans. When asked, “Could 
you locate your disaster recovery 
plan the next five minutes?” one- 
third the 227 respondents admit- 
ted they couldn’t. pros 
asked how often they perform re- 
mote-office data backups, only 58% 
said they were doing every day. 

With all the risks manage the 
world today, from natural disasters 
man-made ones, think this 
little item would the top the 


Business” list. learned otherwise 


talking with host experts and 
executives for this week’s 
edge Center disaster recovery 


aditor Comput- 
erworie. You tan contact 

at 
computerwortd.com. 


(beginning page 33, 


Many our sources 


made clear that this 
truly more business 
issue than technology 
one. But guess who’s 
usually charge the 
disaster response plan? 
IT, course. 

Don O’Connor, CIO 
Southern California Wa- 
ter Co., contends that 
even underprepared 
organizations have least given 
some thought system recovery 
and uptime restores. But business 
units are much more likely 
clueless about their roles. “In ex- 
perience, can respond relatively 
quickly,” O’Connor says. “The part 
that’s missing the users.” 

that’s the situation your com- 
pany, what should you about it? 


this issue, provide plenty 
cost-conscious tips and insider ad- 
vice from managers who have 
faced disaster and recovered. Their 
experiences raise questions you 
should able answer. For starters: 

How strong your disaster re- 
covery documentation? What the 
head sales the one who has 
turn the systems the data cen- 
ter? “We fashion our document 
anyone the business should 
able restart application,” says 
Elbert Lane, lead software devel- 
oper Gap Inc. earthquake- 
prone San Francisco. 

Which applications are really 
the most important ones restore 
first? most companies, it’s proba- 
bly e-mail, not the SAP system 
the Oracle database. 

How robust and ready are the 
plans your suppliers, your out- 
sourcers, your business partners? 
Who’s checking them? 

What are your most critical ac- 
cess issues? Getting the data, the 
systems the people? 

Disaster recovery one test that 
can ace without big budgets 
expensive consultants. It’s matter 
common-sense planning, atten- 
tion process and doing your dis- 
aster homework. 46219 
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PIMM FOX 


Dont Own 
Your 


HAT BUSINESS are 
you in? 
you’re not the 
business, pull the plug 
your department. And I’m 
not talking about sending the 


jobs India. 

Kansas City, Mo.-based H&R Block 
1999 that it’s not the 
business. So, rather than building 
infrastructure, the tax preparer 
turned Eden Prairie, Minn.-based 
Digital River. 

H&R Block wanted someone 
handle the that pumps out all those 
tax forms. wanted round-the-clock 
uptime. wanted all the bells and 
whistles that come with remote and 
redundant data centers. And wanted 
easy interface could quickly 
change product 
offerings and pro- 
motions. 

Sure, in every 
company there are 
those who contend 
that homegrown 
necessary because 
the business 
unique. that you 
need your own 
operation because 
there’s way off- 
load responsibility 
for maintenance and changes high- 
pressure environment. 

Well, imagine compressing year’s 
worth business into four months. 

life H&R Block, where fran- 
tic taxpayers download tax-preparation 
software the last minute. (January 
and April are the heaviest months.) 

The company has moved 97% its 
software business the Internet and 
doesn’t have department keeping 
eye things. Instead, Digital River 
runs routine tests measure the abili- 
H&R Block’s Web site handle 
the strain all those downloads. 

The strategic advantage having 
third-party partner operate your site 
clear: You get what you best. 

For your needs, you simply build 
relationship with vendor. Then 
just one phone call away from 
high-quality service. 

And you save money. Erik Johnson, 


FOX is a London- 
based journalist. 
him 
pimmfox@pacbell.net. 
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H&R Block’s manager online soft- 
ware marketing, says breaking out 
the traditional method delivering 
software boxes has cut H&R Block’s 
cost shipping and materials while 
helping customers, who don’t have 
wait for tax software arrive. has 
also eliminated expensive inventory. 

course, H&R Block reaping the 
rewards greater consumer access 
broadband connections. But has 
been able translate that trend into 
10% drop the number customer 
support questions. has also cut the 
number phone operators and mail- 
processing agents. 

What trend have you taken advan- 
tage lately? 

And since Digital River handles all 
support, all uploading and down- 
loading software, and all upgrades 
and problems, H&R Block can con- 
centrate marketing and product 
changes. The company also gets imme- 
diate access sales-traffic and trans- 
action reports. 

stop spending time and money 
owning and operating system. 
something useful, like your taxes. 
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Floaters, 


Swimmers 
And Sinkers 


three direct reports. 


(The median number was 
six.) the entire popu- 
lation direct reports, 
18% were judged their 
bosses have full leader- 
ship beakers. 

These direct 
reports were seen shar- 
ing several characteristics. 
They were aware and adap- 
tive individuals, first-class 
“noticers” who were able 
respond creatively and with 
presence mind changes 
the environment. They were also 
compelling communicators who were 
able engage others through shared 
meaning and create sense ur- 
gency for the task hand. They were 
found masters organizational 
culture, meaning they knew how the 
organization really worked. They were 
comfortable and conversant with fi- 
nancial and accounting processes and 
terms and knowledgeable about busi- 
ness drivers and opportunities. They 
were connected key players both in- 
side and outside the enterprise, and 
they were perceived being authentic 
and high-integrity human beings. 

also looked five leadership at- 
tributes the 82% the direct reports 


THORNTON A. MAY iS a 
longtime industry ob- 
server, management 
consultant and com- 
mentator, Contact him 
at therntonamay@aol.com. 
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not blessed with overflow- 
ing beakers: attitude, men- 
tal model, energy, connect- 
edness and curiosity. 

Analysis revealed the 
following three subspecies 
direct reports: 

Sinkers: About 12% the 
less-than-full-beaker popu- 
lation. These aren’t happy 
employees. They tend 
have chip their shoul- 
ders and nurture resent- 
ment against the organiza- 
tion. Their mental model 
self-centered; they the work placed 
front them and little else. Their 
energy low, they’re unconnected 
both the internal and commu- 
nities, and they have curiosity. 

Floaters: About 50% the less-than- 


full population. They have good atti- 


tudes and reasonable energy for the 
tasks front them, but they’re 


little lean when comes being 


connected the driving mental mod- 
the enterprise, and they lack the 
curiosity and energy connect 
people might able explain 
the big picture them how 
adds value where it’s going the 
company. 

Swimmers: About 38% the less- 


than-full-beaker population. Swim- 


mers are positive and upbeat, unfo- 

cused. They lack mental model but 

would buy into one was explained 
them. They have good energy and 
like hard work. They are easy con- 
nect with but, sadly, are underconnect- 
ed. They have curiosity but 
acted it. 

Swimmers are the future the orga- 
nization. treated respectfully, their 
attitudes will blossom. Involving them 
enterprise strategy formulation, 
along with focused investment man- 
agement development programs and 
sponsorship networking opportuni- 
ties, will fill their beakers the brim. 

Floaters can groomed become 
swimmers, they’re mentored and 
you can convince them that what they 
really matters. Sinkers usually 
nothing other than sink. 

Investing the leadership skills 
direct reports one the best in- 
vestments you can make. granting 
| the freedom to learn and to teach, you 
bestow upon your company the 
freedom print money. 46155 
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CURRENT CROP 

bosses scores pretty 

good marks leader- 
ship. It’s their reports who are 
greater concern futurists 
and who are the specific focus 


research aimed assessing 
leadership skills. 

conjunction with ongoing cur- 
riculum-design efforts, the Leader- 
ship Academy Florida Community 
College Jacksonville asked 120 
bosses conceptualize their direct 
reports “beakers” leadership 
skills. The evaluators hypothesized 
that not all the beakers would full. 

questioned bosses about 
“patterns emptiness” the leader- 
ship beakers their direct reports. 
The interviews demonstrated that al- 
though shops may have the leader- 
ship they need today, they may not 
have tomorrow. 

The bosses talked each had 


Lead Follow? 


S IT RELEVANT? Bob Metcalfe 

and Nicholas Carr are both 
right [“Speakers Clash Spirited 
Debate Over Relevance,” Quick- 
Link many companies 
that simply follow the lead 
vators and use dominant platforms 
and systems, isn’t worth spend- 
ing money on. cases like that, 
you're best off keeping the technol- 
ogy around but not doing anything 
special. Followers such these 
prove Carr right every day. Nobody 
ever got fired for choosing what 
everyone else chooses. 

Metcalfe chooses the path ex- 
cellence. For leaders, there are still 
places find competitive advan- 
tage using IT. The problem that 
you're breaking trail, you may not 
always use the easiest path. That 
time-consuming and costly. 

huge difference be- 
tween avoiding competitive disad- 
vantage and providing competitive 
advantage. One hard. requires 
imagination and courage. One 
easy. requires solid management 


skills. Either choice may appro- 
priate in a given situation. Neither is 
wrong. Where you want go? 


Alma Wetzker 


Former IT manager, Minne- 
apolis, almaw@comcast.net 


T'S NOT SO SURPRISING that 

Metcalfe and Carr were talking 
right past each other. point 
was simply that IT, and itself, 
may not provide competitive ad- 
vantage. point was that 
innovation and those who skillful- 
take advantage early will 
get a competitive advantage. 

The message derived from 
both men that any competitive ad- 
vantage from innovation may 
company maintain advantage 
through IT, will need continuous- 
this investment will need done 
the most effective way possible. 

history has shown, successful 
implementation new technolo- 
times it’s successful, but other 


times it's abysmal failure. 


Know what buying and why 


with any highly charged de- 
bate, the truth lies amalgam 
both sides’ data and positions. this 
case, the truth boils down this: 


you're buying it, have successful 
plan for using it, and aware that 
the cycle innovation and upgrade 
may treadmill that you get 
off without lot pain. 

Michael Frank 

Network designer, 

Boeing Shared Services Group, 
Segundo, Calif. 


LEAST the way they were 

reported the article, Met- 
arguments address 
arguments. fact, they seem 
reinforce arguments. Met- 
calfe states that spending cur- 
rently high and that seen 
high priority. But this ad- 
dress whether such spending per- 
heightens the urgency 
tance contention, that 
contention indeed correct. 

Metcalfe also asks, “Who will 

provide testbeds?” This like ask- 


ing guinea pig because 
someone else needs the results 
experimental drug. Again, 
legitimizes Carr's claim that one 
try lead with IT. 

common many heated argu- 
ments, there really argument 
all. The answer hinges which 
are talking about. usually 
quite clear which strategic and 
which infrastructural. 

Rajeev Jain 
Consultant, Ann Arbor, Mich., 
rajeev.jain@usa.net 
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RARE SIGHT 


DBMS PRODUCTS 


For your next generation applications, move 
the next generation database technology. 

Caché the post-relational database that com- 
bines high-performance SQL for faster queries and 
advanced object database for rapidly storing 
and accessing objects. With Caché, mapping 
required between object and relational views 
data. That means huge savings both development 
and processing time. 

Applications built Caché are massively scala- 
ble and lightning-fast. Plus, they require minimal 
database administration. 

More than just database system, Caché incor- 
porates powerful Web application development 


environment that dramatically reduces the time 
build and modify applications. 

The reliability Caché proven every day 
“life-or-death” applications thousands the world’s 
largest hospitals. reliable, it’s the leading 
database healthcare and powers enterprise appli- 
cations financial services, government and many 
other sectors. 

are InterSystems, specialist data manage- 
ment technology for twenty-five years. provide 
24x7 support four million users countries. 
available for Windows, OpenVMS, Linux and 
major UNIX platforms and deployed systems 
ranging from two over 10,000 simultaneous users. 


InterSystems 


CACHE 


Make Applications Faster 


Free White Paper 


Read request copy the Baroudi/Bloor white paper “The Failure Relational Database, 


The rise Object the Need for the Hybrid 


© 2004 InterSestems Corporation 


All nghts reserved. Lote 


Systems Cacie ts reguste 


red trademark of InterSystems Corporanon. 7-03 
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VOICE-OVER-IP 


HEN KEVIN LOPEZ 
began sending voice 

calls over his data 

network using new 
telephony system two years ago, 
had way monitoring voice 
traffic maintain the quality 
calls. “We didn’t have any monitor- 
ing the voice side, were 
totally reliant our [data] net- 
work counterparts,” says. 

Now, using Avaya Inc.’s Integrat- 
Management software, can 
configure softphone applet 
that lets function tele- 
phone place call between any 
two points the network and 
hear the voice quality while track- 
ing network metrics screen. “It’s 
almost like speedometer,” says 
Lopez, national manager tele- 
communications Grant Thorn- 
ton Inc., global accounting and 
auditing firm Chicago with 
about 3,500 users voice-over-IP 
systems. will show you red, 
yellow and green where the call 
was terms lost packets, any 
sort error encountered.” The 
tool can also “roll back” the speed- 
ometer view and diagnose net- 
work conditions the precise mo- 
ment when user says was hav- 
ing trouble. 


VoIP still requires special tools 
and skills because voice traffic 
far more sensitive than data 
common problems such 
dropped delayed packets. But 
tools for managing VoIP traffic 
have evolved, Lopez and other 
VoIP managers have become 
increasingly confident that they 
can manage even large-scale de- 
ployments voice communica- 
tions systems over converged 
voice/data networks. 

Looking back what was 
capable doing with the manage- 
ment tools that were available 
when first deployed VoIP, Lopez 
says, “Life much better. 
can see troubleshoot our own 
happening.” 

Network managers say the place 
start with network compo- 
nents and management tools that 
support Ethernet quality-of-service 
(QoS) standards for prioritizing 
voice traffic, and with management 
software that can real-time, end- 
to-end monitoring voice traffic 
across LAN WAN. Administra- 
tors should also upfront evalua- 
tions their networks ensure 
that they can handle VoIP and 
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Continued from page 

learn watch for subtle problems that 
don’t interfere with data applications 
but wreak havoc with voice quality. 

Voice traffic isn’t bandwidth hog, 
but converged network can fall 
victim unexpected, short-lived con- 
gestion caused by, say, user initiating 
streaming video application. One key 
metric track propagation delay. 
lag only milliseconds can create 
echo call, while delays greater 
than 250 milliseconds can cause one 
speaker talk over the other. 

Jitter, the variation arrival times 
voice packets that should all arrive 
the same moment, another problem. 
One way reduce jitter store and 
early-arriving packets until their 
slower counterparts arrive. However, 
making such “jitter buffers” too large 
can itself increase delays the proc- 
essing the voice packets, reducing 
voice quality. 

Designers VoIP networks need 
upfront assessments sure their 
networks can handle the demands 
temperamental VoIP traffic. They 
should also pay close attention net- 
work performance metrics that barely 
mattered the more familiar world 
data traffic. But that, administra- 
tors need specialized tools. 


Basic Requirements 

The first requirement for any network 
management tool that must sup- 
port QoS. Sean McRae, vice president 
and CIO Prudential Northwest 
Properties, real estate firm Port- 
land, Ore., uses Network Supervisor 
monitoring software from 3Com Corp. 
Marlboro, Mass. The software “al- 
lows keep eye our WAN 
traffic between all our servers and 
routers” ensure that voice packets 
get top priority, says. 

The second requirement the abili- 
perform real-time traffic monitor- 
ing administrators can troubleshoot 
short-lived problems that cripple voice 
quality. Another common and useful 
feature the ability see the condi- 
tion the network the point time 
when the user reported problem. 

Network managers also need tool 
that can monitor all the network 
components along the call path that 
might affect voice quality. Lopez, for 
example, wants see 
alerts not only for his 
private branch ex- 
changes, but also for 
switches any other 
component that fail- 
ing overloaded. 

Sources man- 


agement tools include the vendors that 
make network components such 
switches and routers, well the 
manufacturers telephony sys- 
tems. For example, Nortel Networks 
Ltd.’s Optivity Policy Services and Op- 
tivity Network Management System 
provide central management and con- 
trol QoS across network. 

Third-party management software 
vendors also focus VoIP manage- 
ment. Concord Communications Inc.’s 
eHealth Voice Quality Monitor assess- 
network readiness and monitors on- 
going voice quality. The tools aren’t 
cheap; basic eHealth system starts 
$6,000, and a more comprehensive 
package that manages QoS and the 
end-to-end network infrastructure 
starts about $150,000. 

NetIQ Corp.’s Vivinet Manager Suite 
provides proactive network and sys- 
tem monitoring and automatic alert- 
ing. provides integrated monitoring 
telephony, unified messaging and 
video applications. The suite also 
helps network administrators deter- 
mine voice problems are being 
caused the hardware, operating sys- 
tem application level. Pricing varies 
customer environment, but sys- 
tem capable managing 100-phone 
Cisco CallManager deployment costs 
about $6,000. 

Another NetIQ application, the 
$5,000 Vivinet Diagnostics, finds the 
source voice quality problems, iden- 
tifies the causes and prioritizes them, 
combining network discovery, synthet- 
transactions and monitoring 
LANs, and network devices. 

Because VoIP management still 
relatively immature area, management 
tools supplied telephony system 
vendors such Nortel, Cisco Systems 
Inc. and Avaya work best with their 
own products, says Robert Rosenberg, 
president Insight Research Corp. 
Boonton, N.J. And some management 
features may not work with gear from 
other vendors. 

That can problem because most 
customers use VoIP technology from 
number vendors, says Darrell Epps, 
technical assistance manager 
NextiraOne LLC, systems integrator 
and managed service provider Hous- 
ton. However, says, over the past 
months several independent ven- 

dors management software have 

made progress producing soft- 
ware that can manage VoIP com- 
ponents from multiple vendors. 
They include NetIQ and Con- 
cord well Micromuse 
Inc., which offers system 
called Netcool for VoIP. 


Six Ways 
Improve VoIP 


SOURCE: CONCORD COMMUNICATIONS INC., MARLBORO, MASS. 


Some equipment vendors are also 
teaming with third-party vendors 
provide management tools that aren’t 
tied single vendor. For example, 
Nortel includes NetIQ’s Vivinet Man- 
agement part its Enterprise Net- 
work and Service Management capa- 
bilities. And the Visual UpTime Select 
performance management application 
from Visual Networks Operations Inc. 
ships with Cisco’s routers and can also 
integrated with system and network 
management tools such Hewlett- 
Packard Co.’s OpenView, says Naresh 
Kannan, director product strategy 
Visual Networks. 

And many VoIP tool vendors are 
working combine VoIP functions 
with their data management products, 
or with those from other vendors, in 
order provide single view both 
voice and data traffic the converged 
network. For example, Nortel ship- 
ping phones that support real-time 
monitoring voice calls and send 
alerts problems that could affect 
voice quality the same applications 
that network managers use monitor 
data traffic. This reduces the number 
management consoles customers 
must buy and monitor and makes 
easier find and fix problems. McRae 
also uses his management software, 


Network Supervisor, to monitor both 
the data and voice side his network. 
Bruno Battochio, communications 

specialist Falconbridge Ltd., 
Toronto-based mining company, uses 
combination Nortel’s Optivity man- 
agement software and traditional 
packet analyzer monitor the perfor- 
mance phones linked Nortel 
Business Communications Manager 
system underground mine. “We 
didn’t mix and match equipment” from 
multiple vendors, Battochio says, 

adding that wanted avoid situa- 

tions has faced the past where 

different vendors blamed one another 
for problem instead fixing it. 

Looking forward, vendors hope 
provide “self-healing” networks with 
tools that not only proactively find 
but also fix them automati- 
cally. 2005, Nortel hopes ship- 
ping version Optivity that can au- 
tomatically solve voice quality prob- 
lems resetting network port re- 
defining the QoS settings implemented 
on a switch, says Clive Foreman, vice 
president engineering for enterprise 
network and service management 
Nortel Brampton, Ontario. 

John Montgomery wants manage- 
ment tools that can automatically 
reroute voice packets slowdown 
hits part the network, something 
that says now highly manual 
process.” Montgomery, vice president 
and chief technology officer Embar- 
cadero Systems Corp. Alameda, 

Calif., about one quarter the way 
through plan move users 
Cisco’s telephony system. Although 
each upgrade CiscoWorks manage- 
ment software brings more features, 
says proactive troubleshooting fea- 
tures have been slow materialize. 

Despite some limitations, most ob- 
servers says today’s VoIP management 
software the task managing 
large-scale VoIP deployments 
although can cost anywhere from 
$25 hundreds dollars per user per 
year, depending the number 
users and the range functions re- 
quired, says Ronald Gruia, analyst 
Frost Sullivan Ltd. Toronto. 

“The management tools have to- 
day are designed for installations 
tens thousands, not hundreds 
thousands, users” says McRae. But 
choosing the right tool, and knowing 
how use it, requires understand- 
ing the finicky new world VoIP. 
45708 
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More Computers for Less Money, Less Space and Less Time 
with Tripp Lite KVM Switches 
Tripp Lite KVM Switches offer the most economical and convenient solutions available for controlling 


512 PCs servers with single keyboard/video/mouse console. Save money, space and time eliminating 
unnecessary consoles, removing cable clutter and avoiding the need move between multiple consoles. 


16-Port Rackmount 


All-in-one console KVM switch includes keyboard, 15” LCD screen, 
touch pad and 16-port KVM switch easy-glide rack drawer 


Built-in on-screen display gives you control over all ports 


Daisy-chain capability and two-level password security 


models available (one features integrated 
console KVM switch shown) 


NEW! Control 
Just 


8-Port Rackmount 
Slim cabinet design with daisy-chain capability 
On-screen display gives you control over all ports 


KVM 
The Perfect Toy for 


4-Port Desktop 
Compact desktop design with individual port selection button 


Notebook and wireless-ready 


Compact desktop design with individual port selection button 

Notebook and wireless-ready 

For more information Tripp Lite KVM switches, 


visit Tripp Lite's website: 
http://www.tripplite.com 


773-869-1091. 


Resellers: For special demo unit pricing, call Matt Mulac 
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Vendor Upgrades 
Event Technology 


Network Intelligence Corp. 
Westwood, Mass., has upgraded 
its security event management 
software and hardware. The com- 
enVision Version 2.003 
software designed let users 
compare security-related data 
with similar data captured the 
past. also features cus- 
tomized alerting feature and ex- 
panded device support. Network 
Intelligence’s new Series 
event management appliances 
feature the latest enVision soft- 
ware and dedicated object 
database. Pricing for the Se- 
ries starts about $59,000 for 
midsize companies and about 
$190,000 for large enterprises. 


Intranets.com 
Adds Calendaring 


Intranets.com Inc. Woburn, 
Mass., has added functions its 
Online Collaboration Suite, which 
designed allow corporate 
users manage and coordinate 
events anywhere the world us- 
ing Web browser. The company 
said that the new calendaring 
features will let users check for 
scheduling conflicts, synchronize 
appointments with Palm-based 
handheld Outlook 
and notify participants meet- 
ings via e-mail. They are available 
now additional charge 
Intranets.com customers. 


NetScreen Offers 
SSL Meeting App 


NetScreen Technologies Inc. 
Sunnyvale, Calif., has announced 
the availability its new Net- 
Screen Secure Meeting, Secure 
Sockets Layer-based appliance 
for securing online meetings and 
application-sharing sessions. 
NetScreen said that the appliance 
lets companies securely provision 
online meetings and collaborative 
sessions with 250 users. 
The appliances support policy- 
based authentication, authoriza- 
tion and central management 
users collaborative session. 
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ROBERT MITCHELL 


Almost Real Time 


HERE ARE DOZENS WAYS search for 
flights Florida, and tried them all. 
carefully worked each the three big Web 
travel sites the same time, juggling mul- 
tiple browser windows. Orbitz, Travelocity 
and Expedia each offered different results. tried alter- 
native dates and airports. After more than hour, 
emerged from office and called wife 


confirm the final choice, 
bragging that the savings 
had been worth the time 
spent. But when made 
that last mouse click 
commit the transaction 
credit card, the reserva- 
tion didn’t through. 

wife, who now calls 


with full deck. But sus- 
pect that the true problem 
was that wasn’t playing 
real time. 

The airline reservations business 
probably closer real-time comput- 
ing than any other industry except for 
financial services. But the database in- 
teractions among business partners 
required provide real-time reserva- 
tions data shows just how big chal- 
lenge real time presents. 

Until the moment tried book 
flight, wasn’t talking the vendor’s 
primary reservations database. was 
accessing secondary database de- 
signed for inquiries. Using such data- 
bases for flight searches makes lot 
sense, since the folks don’t want 
thousands queries bombarding the 
systems executing transactions that 
bring real revenue. 

Sabre Holdings’ arrangement typi- 
cal. The global distribution system 
(GDS) high-speed, fault-toler- 
ant NonStop servers consummate 
deals highly optimized database. 
the same time, MySQL databases 
based Linux server farm serve 
lowest-fare flight data response 


per,” thinks I’m not playing 


«ROBERT MITCHELL 
Computerword 3 senior 
him at rebert.mitehe?® 
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customer inquiries. 

Unless fare price and 
seat-availability data pre- 
sented customers up- 
dated real time, users 
may not learn that fare 
unavailable until they try 
complete the purchase. 
Sabre has addressed part 
this issue delivering 
continuous, live updates 
from the NonStop system 
its MySQL database 
server farm. 

third-party data synchronization 
tool from San Francisco-based 
GoldenGate Software provides syn- 
chronous updates between databases. 
That’s one reason why corporate 
travel agent, Suzette, never has prob- 
lem confirming fare using her direct 
connection into the Sabre system. She 
says employees like call all the 
time saying they’ve gotten better 
fare. say, ‘That’s great; see you can 
complete it.’ And they can’t,” she says. 

The reason they can’t may have 
something with the way reserva- 
tion systems receive updates from in- 
dividual airlines. For example, 
Sabre, secondary databases contain 
only fares, rules and schedules. Prices 
are calculated the primary NonStop 
database, and for real-time seat avail- 
ability, the reservation system must 
query the individual airlines’ main- 
frame databases. 

Even the pricing information isn’t 
real time: Sabre and other GDS ven- 
dors receive updates five times each 
day from Airline Tariff Publishing Co., 
industry cooperative. But providing 


real-time seat availability data the 
biggest challenge. 

travel Web site can generate 100 
searches per second that sift through 
1,000 flights each. The volume re- 
quests needed verify seating for all 
those would overwhelm the airlines’ 
availability databases. get around 
this problem, travel Web sites cache 
data and display hundreds fares that 
the system predicts will available. 

The downside that customers may 
receive options that don’t exist 
either because the seating unavail- 
able pricing data has changed and 
know until they try make 
the purchase. The alternative, which 
Sabre prefers, confirm availability 
real time but show fewer options. 

The airlines don’t like Web sites 
caching availability information, but 
they can’t respond the potential vol- 
ume incoming requests, says Alan 
Walker, vice president Sabre Labs. 
His company would like bring 
copy each airline’s master seat- 
inventory database in-house and re- 
ceive real-time updates it. this 
way, could compute availability and 
offer larger number accurate flight 
options users. But round-the- 
clock system with such high transac- 
tion loads, Walker says the transition 
would like “changing tire 100 
miles per hour.” 

However, Walker doubts that these 
issues have anything with why 
couldn’t book reservation. The 
other reason why Suzette never fails 
book ticket because, unlike me, 
she can hold seats before they’re pur- 
chased. although it’s possible that 
inaccuracy fare search results 
was blame, it’s more likely that time 
spent comparison shopping did in. 
Most likely, Walker says, “your seats 
were sold out from under you.” And 
for some strange reason, wife 
thinks that’s funny. 46191 
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VERY NIGHT, United Parcel 
Service Inc. processes av- 
erage 600,000 packages 
through its massive World- 
port hub Louisville, Ky. 
One hundred aircraft fly 
and out the million- 
square-foot facility. It’s feat 
industrial choreography that the 
company couldn’t accomplish without 
advanced systems, says Jovita Car- 
ranza, vice president air operations. 

Carranza, who started her career 
with UPS Los Angeles loading 
trucks, says would cost-prohibi- 
tive handle that package volume 
manually. Plus, the Atlanta-based 
company has process all the pack- 
ages slated for overnight delivery be- 
tween 11:30 p.m. 3:30 a.m. goal 
couldn’t meet had sort them all 
manually, she says. 

Moreover, automation has helped 
UPS increase employee retention 
reducing the manual workload, says 
Rapp, vice president human 
sources the UPS Airlines unit. 

That’s important for UPS, Rapp says, 
because worker turnover threatened 
tap out the labor pool Louisville. 
Brian Clancy, consultant trans- 
portation and logistics consulting firm 
MergeGlobal Inc. Arlington, Va., 
agrees. says that cutting the 
amount manual labor involved, UPS 
can better attract and retain the 5,000 
workers needed staff Worldport. 

Worldport’s and automation sys- 
tems run mind-boggling array 
hardware, including almost 14,000 
computer devices (see box, next 
page). These systems, which include 
30TB online storage, are networked 
via 5,500 miles fiber-optic cable and 
control 122 miles conveyor belts 
that move the packages, according 
Ted Gallagher, Worldport’s systems 
manager. 


Managing ‘The Machine’ 

UPS invested $100 million software 
development for the Worldport appli- 
cations, says Gallagher, who refers 

the combination hardware and soft- 

ware “The Machine.” 

Though UPS used some outside 
consultants, CIO and Senior Vice Pres- 
ident Ken Lacy says the company had 
choice but develop the infra- 
structure in-house, “since was not 
available off the shelf.” Besides, in- 
house development has made easier 
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maintain and troubleshoot the sys- 
tems, says. 

major applications tied together 
company-developed middleware 
called the Common Message Environ- 
ment. This software uses proprietary 
messaging protocol, allowing for easy 
transfer information among dis- 
parate applications, including main- 
frame-based legacy systems and 
newer e-business applications. 


While The Machine manages World- 
port, UPS maintains staff 
more than 100 people manage it. 
That management starts the most 
basic level daily basis, with what 
Greg Echsner, manager the World- 
port technical support group (TSG), 
cails “pretrip” inspection critical 
systems throughout the facility. 

About two hours before the sorting 
process begins, John Music and five 
other technicians from the Worldport 


service desk walk through sections 
the building, checking key compo- 
nents such the computerized scales 
that weigh igloo-shaped containers 
filled with packages loaded 
aircraft. 

Those massive scales, located 
each the hub’s aircraft loading 
doors, are networked system de- 
veloped UPS called the Distributed 
Weight and Balance System, which en- 
sures that containers are loaded onto 


Be in igloo-s shape ed contain iner of pac! Kage ges is pushed across the rollerball floor. 
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aircraft order that promotes 
load stability. 

The service technicians also pay 
particular attention the status the 
scan guns that read the all-important 
bar codes, testing one out every five, 
Echsner explains. 

The scan guns account for the 
majority hardware problems the 
TSG handles because the devices are 
often dropped the floor. 

the TSG teams finish their work, 
hub controllers such Terry Rigdon 
get settled their desks the opera- 
tions control center high above the 
Worldport floor. front Rigdon are 
three computer screens that serve 
windows into what Gallagher calls the 
brain The Machine: the Human- 
Machine Interface system. 

This system allows Rigdon ob- 
serve and manage the flow packages 
throughout the building. Rigdon can 
monitor key applications such the 
control the programmable logic 
controllers (PLC), which direct com- 
pressed-air pucks, bumpers, push 
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‘desktop and 


is" 


The PLCs determine where route 
the packages based bar-code labels, 
which are read either scanners 
high-resolution cameras, Gallagher 
says. Donna Barrett, UPS spokes- 
woman, says 93% the packages han- 
dled Worldport use these labels, 
which UPS lingo provide package- 
level detail (PLD). 


Customer Cooperation 
Getting that detailed information re- 
quires customer cooperation, which 
Barrett says the company achieves 
explaining the benefits large ship- 
pers and, some cases, providing 
them with label printers. Small ship- 
pers, including individuals, can create 
their own labels the UPS Web site 
and print them laser ink-jet 
printers. 

Project leader Mark Dilk says that 
when customers create PLD label, 
they also automatically feed data about 
their packages Worldport over the 
UPS global network. This helps World- 
port staffers build twice-daily “sort 


Gallagher says. The sort plan the key 
management the company’s next- 
day air shipments, says. 

Worldport has handle package 
flows that change daily, plus seasonal 
variations such huge volume in- 
creases Christmas. that, Gal- 
lagher says, loading and unloading po- 
sitions Worldport and the miles 
conveyor belts between must re- 
configured through the sort plan, 
which managed application 
called the Flexible Lineup Editor 
(Flex). 


The ‘Secret Sauce’ 

Flex the “hidden secret sauce” 
Worldport, Gallagher says, because 
manages the building configuration 
“so all the dependent applications 
know where the packages go.” Flex 
executes this reconfiguration twice 
day, adds, once for the night shift 
(for next-day packages) and once for 
the day shift (which processes about 
300,000 second-day air packages). 

Two systems (one for domestic 
packages and one for international) 
feed package-tracking data the UPS 
data center Mahwah, This infor- 
mation later used help customers 
track the packages over the UPS 
Web site. 

Once package completes its jour- 
ney across the 122 miles conveyor 
belts, it’s directed destination 
chute and loaded container, ready 
rolled onto aircraft. Through- 
out the process, most packages are 
touched only twice humans: once 
for unloading and once for loading, 
Gallagher says. 

The containers are then pushed onto 
the automated scales, checked the 
Distributed Weight and Balance Sys- 
tem and put aircraft. 

the last container loaded, the 
hum the conveyor belts momentari- 
ceases and Worldport grows almost 
silent. But not for long. just matter 
hours, another team Worldport 
TSG technicians will start check 
hardware preparation for the day 
shift, and Flex will start build new 
sort plan and reconfigure systems for 
the hub that rarely rests. 45962 


HOMEGROWN APPLICATIONS 


UPS spent $100 million internally develop 
applications for Worldport. Read about the core 
systems for managing the hub: QuickLink 45967 


Preemptive Strikes: The UPS Worldport technical 
support group defends the system from worm and virus 
attacks through constant monitoring of hacker and 
security newsgroups, which leads to an early and 


UPS: 


The Technology 
Arms Race 


EDEX main hub 

Memphis can more than match 

the UPS Worldport hub 

Louisville, Ky., terms pack- 
age throughput, thanks its auto- 
mated systems, according Alex 
Vergos, senior technical adviser 
the company's services division. 

Vergos says FedEx could move 
325,000 pieces per hour through its 
Memphis “small sort” facility, which 
primarily handles overnight letters. 
adds that FedEx can also sort 
125,000 small packages per hour us- 
ing separate automation systems and 
conveyors the same million- 
square-foot building. 

That tops the UPS hub Louisville, 
which can move 304,000 packages 
per hour through million-square- 
foot building. However, UPS moves 
higher volume large packages 
through Worldport, such automo- 
bile tires strapped onto wooden pal- 
lets, which turn are placed metal 
transporters for sorting. 

Vergos says the average transit 
time for small package Memphis 
about seven minutes. Ted Galla- 
gher, Worldport’s systems manager 
for operations planning and control, 
says Worldport could move package 
any size through that facility 
between eight minutes. 

UPS and FedEx are “technol- 
ogy arms race” move packages 
smarter and faster, with each “light 
years” ahead competitors such 
Belgium-based DHL International Ltd. 
and the Emery Forwarding division 
Palo Alto, Calif.-based CNF 
says Brian Clancy, consultant 
transportation con- 
sulting firm. 

Clancy declines say which rival 
has the most automated hub. But 
says that UPS tops FedEx using 
and automation reduce manual 
workloads Louisville. 

which that basis 
makes Worldport the best hub,” 
Clancy says. 


QuickLink 45966 
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plan,” which reconfigures the mam- 
moth facility and its 17,000 conveyors 
match the expected package flow, 


packages from belt belt chutes 
and deliver the packages workers 


for loading into outbound containers. 


Enterprise Rent-A-Car wanted reduce operational costs. 
Xerox found the key success was helping them get access 
2.4 million vital documents month over their intranet. 
There’s new way look it. 


Enterprise Rent-A-Car wanted make their document process more ments month are scanned and stored into electronic repository, 
efficient. they consulted with team document experts from Xerox. making them instantly available over the Enterprise Intranet whenever 
Working together, they analyzed the document process across thousands needed. The result: Documents are managed timely manner. 
locations worldwide, and initiated systemic improvements key aspects Redundancy and errors are cut way back, and security maximized. find 
filing and retrieving mission-critical documents. implementing Xerox out how Xerox can bring this kind time and cost-saving expertise 
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Lewis Joins Cruise 
CIO 


Doug Lewis has 
been named 
senior vice 
president and 
corporate CIO 
Carnival Corp., 
the world’s 
largest cruise 
company. the newly created 
position, Lewis will work with 
Carnival’s operating units 
develop corporatewide strat- 
egy. will also head the Miami- 
based company’s Council, 
each operating unit. Lewis previ- 
served CIO Six Conti- 
Hotels Inc., AT&T/Lucent 
and Pratt Whitney. 


GeoLogistics Picks 
Kirk Lead 


GeoLogistics Corp., a third-party 
logistics company Santa Ana, 
Calif., announced the appoint- 
ment Charles Kirk Kirk 
was previously head C&S 
Wholesale Grocers Inc., a Brattle- 
boro, Vt.-based grocery whole- 
saler. also led consumer mar- 
keting initiatives General 
Motors Corp. and logistics proj- 
ects FedEx Corp. 


Garvey New 
Chief Warnaco 


The Warnaco Group Inc., New 
York-based apparel company, has 
named Michelle Garvey CIO. Pre- 
viously, she served CIO 
MemberWorks Inc., partnership 
marketing company, and held 
positions Brooks Brothers, 
Ames Department Stores Inc. and 
Arthur Andersen LLP. 


Health Care Firm 
Taps Probst 


Mark Probst was appointed vice 
mountain Health Care Inc. Salt 
Lake City. Prior joining IHC, 
Probst was a partner at a con- 
sulting firm and large 
third-party administrator. 


BARBARA GOMOLSKI 


Its 
Re-engineer 


NFORMATION TECHNOLOGY PROFESSIONALS 
are usually the best the organization when 
comes business process re-engineering. Why 
it, then, that the group often has some 
the most “underengineered” processes the 
company? It’s true. great looking business 
processes other parts the organization but not 
comfortable looking how its own work gets done. 


There are still many 
“world-class” groups 
that can build enterprise- 
scale applications but lack 
standard process for 
problem resolution op- 
erational change manage- 
ment. Increasingly, lead- 
ers are getting interested 
process improvement. This 
partly because most 
companies are still looking 
for ways reduce costs. 

you’re like many 
managers, already 
consolidated servers, audit- 
telecommunications 
bills and squeezed your hardware and 
software vendors for better deals. In- 
deed, for many companies, the low- 
hanging fruit cost cutting has al- 
ready been harvested. Further reduc- 
tion costs may possible, but 
will likely require taking close look 
the processes the organization. 

Naturally, increased efficiency isn’t 
the only motivator for sharpening 
processes. re-engineering its proc- 
esses, the organization can also 
improve the quality its service. 

There are hundreds processes 
most organizations. It’s overwhelm- 
ing tackle them all once. fact, 
it’s probably feasible look only 
three four key processes the next 
months because you have keep 
running while you this. 

When looking process maturity, 
many organizations start with the 
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basics, like operational 
change management. Es- 
sentially, these are process- 
that define how changes 
the environment are 
received, recorded, ana- 
lyzed, approved, priori- 
tized and executed. 

Other key areas that 
often get attention the 
early phase process 
improvement are finan- 
cial management, configu- 
ration and capacity man- 
agement, and the manage- 
ment assets, procure- 
ment and vendors. addi- 
tion, organizations often consider 
processes around the management 
service levels, application life cycles 
and quality assurance. 

The best way begin focus 
the process “pain points” your orga- 
nization. For instance, your staff 
still responding end-user requests 
look your request management 
processes. you find that basic in- 
formation about capabilities isn’t 
getting out your internal customers, 
want focus your communi- 
cations processes. Maybe planning 
weak, budget estimates fail hit 
the mark. 

Whatever the issue, begin isolat- 
ing the processes around the problem. 
(Sometimes there will docu- 
mented processes, and leaders will 
have interview staffers find 


out how issues are handled.) 

find that there are several ex- 
amples well-defined processes 
already existence. the application 
development arena, the Software Engi 
neering Institute’s Capability Maturity 
Model provides framework for proc- 
ess improvement. 

The Infrastructure Library, origi- 
nally developed the U.K. govern- 
ment, has become popular frame- 
work for key processes such 
change, problem, configuration and re- 
lease management. Because its Eu- 
ropean roots, ITIL has been more 
widely adopted the European Union 
than has the U.S., but its populari- 
this side the pond appears 
growing. The following are some 
other process frameworks worth 
considering [QuickLink 

Control Objectives for Information and 
Related Technology (CobiT). framework 
ensure that resources are aligned 
with business objectives. CobiT de- 
fines processes and links them 
more than 300 tasks. 

Six Sigma. methodology which 
processes are continuously refined 
until their outcomes fall within 
acceptable level defects. Because 
its roots manufacturing, there on- 
going debate how applicable Six 
Sigma IT. 

9000. standard that primari- 
focuses achieving predictability 
business processes. 

Regardless whether organi- 
zation uses predefined methodology 
for improving its processes, it’s good 
idea for every group periodically 
review how the company does things. 
This particularly true organi- 
zations continue look for ways 


more efficient and service-oriented. 
45730 
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Listen Mom 

Dear old Mom said expect the 
worst. That’s good advice for 
managing disaster recovery efforts 

with your outsourcers, says 

columnist Mark Hall. 


= 


Classic Mistakes 

Here are the five 

most common errors 

that companies make 
when preparing for 
disaster. 


Dose Reality 
Nothing gives you 
warts-and-all experience 
like testing your disaster 
recovery plan the real 
world. 


Managers describe their plans for 
protecting the business from disasters 
and avoiding classic blunders. 


EDITOR’S NOTE 
YOU OVERSPENDING DISASTER recovery, especially you listen every vendor which require recovery hours, may 
RECOVERY? know seems like saying you must and comply with need only inexpensive tape backup, while the 
ridiculous question. How could you the Sarbanes-Oxley Act. (None those third tier may need nothing all, DeLisle says. 
be? Newspaper headlines throw weasels have actually read the law that the business executives and regula- 
more risks and regulators tions, you can bet that.) tors really require that you take prudent steps 
more requirements Tim DeLisle, managing principal for business continuity. You don’t have bank- 


Corigelan LLC, disaster recovery con- rupt the company. 45982 

sultancy Chicago, says the way avoid 

course it’s full suggestions overspending establish three tiers Mitch Betts Computerworld’s Features editor. 
Things You Ought Do, which usually recovery based business re- mitch_betts@computerworld.com. 
require spending more money, not less. Evenif quirements. begins with the CIO asking 

your disaster recovery situation pretty good, ness managers which few applications CENTERS ONLINE 


your face almost every day. Besides, this 
special report disaster recovery, 


you still have worry about your suppliers critical and require recovery within hours and resources are available our Recovery Center: 
outsourcing contractors. keep the business afloat. You don’t have 
But possible overspend disaster ror everything! The second tier applications, 
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These tips from users with 
recovery plans will help keep your 
business running during the most 


common disasters. Lucas Mearian 


KEY KEEPING your 
business its feet 
disaster anticipating 
the sometimes cascading 
effects catastrophe can 
have your operation. 

Take Miami-Dade County, for exam- 
ple. When hurricane hit southern 
Florida 1992, the county’s data cen- 
ter lost power. Diesel generators had 
overheated when well water ran out 
because high winds had broken water 
mains and lowered the water table. 
managers later had air-cooled genera- 
tors installed. 

One the problems with disaster 
recovery, experts say, that although 
most companies have plans for com- 
mon scenarios weather-related 
emergencies, headquarters lockouts 
and massive power outages those 
plans aren’t regularly tested com- 
municated end users. fact, ina 
recent survey 283 Computerworld 
readers, 81% the respondents said 
their organizations have disaster re- 
covery plans. But 71% the respon- 
dents companies with plans said the 
plans hadn’t been exercised 2003. 

takes forethought avoid busi- 
ness shutdown during disaster. Ex- 
perts and users agree that there are 
steps you can take increase your 
chances coming through the most 
common disasters unscathed. 


Weather-Related Emergencies 


“If you look why facilities fail [dur- 
ing weather disasters], it’s all pretty 
predictable. They call act God, 
and call act stupidity,” says 
Ken Brill, executive director The 
Uptime Institute Santa Fe, N.M. 
Hurricanes threaten Miami-Dade 


County’s data center every year from 
June through November, yet man- 
agers still struggle with getting every- 
one understand the importance 
disaster planning. “The challenge 
always have make sure the staff 
completely involved and have par- 
ticipation,” says Ruben Lopez, director 
the enterprise technology services 
department for the county. 

Miami-Dade County gives itself 56- 
hour window test its disaster recov- 
ery plan each year cutting over 
its alternate data center and restoring 
data. uses the time find deficien- 
cies and later corrects them. 

“Business continuity and disaster re- 
covery preparedness all about figur- 
ing out what your deficiencies are and 
how going fix them. It’s not 
about how get paper,” says 
Joe Torres, disaster recovery coordina- 
tor for Miami-Dade County. points 
out that it’s not the people he’s testing 
during disaster recovery exercise but 
the plan “because you can’t depend 
the people being available.” 

going give them book 
with instructions, and they need 
able follow that,” Torres says. One 
step Miami-Dade has taken that di- 
rection consider call-tree software 
that could help employees contact key 
managers emergency. 

Walter Hatten, senior vice president 
and technical services manager 
Hancock Bank Gulfport, Miss., has 
focused consolidating his server 
farm and creating redundant commu- 
nications network for area the 
country that gets hit brushed 
hurricane every three and half years. 
The 100-branch bank, with headquar- 
ters the Gulf Mexico, consoli- 


for means “figuring out what your deficiencies are,” says JOE TORRES Miami-Dade 
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dating 500 servers onto Linux-based 
mainframe reduce recovery time 
disaster. 

“Just the sheer magnitude rebuild- 
ing 500 servers puts risk for not 
being able quickly enough,” 
says Hatten, who chose Linux for its 
open standard and scalability. 
says the mainframe will offer greater 
speed for recovery data, reducing 
the amount time would take 
restore data from days hours. 


Headquarters Lockouts 
Maria Herrera chief technology offi- 
cer Patton Boggs LLP, Washington- 
based law firm with 400 attorneys 
specializing international trade law. 
Because the firm’s proximity the 
U.S. Capitol building, one constant 
concern building lockout brought 
terrorist threats, she says. 
Herrera has set duplicate operat- 
ing environments several remote of- 
fices and has contracted with two dis- 


employees from entering the firm’s 


tions technologist the Delaware 


aster recovery vendors: SunGard Data 
Systems Inc. Wayne, Pa., for server 
recovery and workstation services, and 
AmeriVault Corp. Waltham, Mass., 
for data backup. 

January, AmeriVault installed its 
CentralControl interface desktops 
and agent each Patton Boggs’ 
servers. After completing initial full 
backup all data, AmeriVault now 
performs daily incremental backups 
deltas, changes, disaster recovery 
centers Waltham and Philadelphia. 

emergency, data restores can 
performed remotely, even from 
home, administrators using point- 
and-click function Web portal 
provided AmeriVault, data can 
shipped tape for large restores. 

“Every month couple months, 
access several documents and 
download them from AmeriVault 
test the system,” says Herrera. During 
full testing, she spends hours recov- 
ering full data sets. able re- 
store everything within the firm 
about hours,” she says. 

Herrera also suggests involving all 
personnel the disaster recovery 
testing process, because emer- 
gency, you never know who might 
available help. She has trained em- 
ployees all four satellite offices 
around the country disaster recov- 
ery procedures. 

SunGard also has several facilities 
where personnel and lawyers can 
meet continue work the event 
headquarters lockout, Herrera says. 

Officials Mizuho Capital Markets 
Corp., a subsidiary of the world’s sec- 
ond-largest financial services firm, 
Mizuho Financial Group Inc. Tokyo, 
say that some the most effective dis- 
aster recovery tools are the simplest. 

For example, when protest kept 


Times Square headquarters late last 
year, managers passed out laminat- 
business cards with directory 
managers’ home phone numbers. 
Doug Lilly, senior telecommunica- 


Department Technology and Infor- 


Choose vendors that are proactive 
and require prodding upgrade 

test your disaster recovery plan. 
Don't test people: test your disaster 
recovery plan. People come and go. 
Make the plan easy follow and use. 
employees being willing fly 
alternate work sites. 
Distribute key disaster recovery 
personnel across many geographic 
locations. 
Turn disaster recovery data centers 
into active work sites. 
Disaster recovery plans are living, 
breathing things. Keep them 


mation, says his agency has three data 
centers that support about 20,000 state 
employees. The department uses EMC 
Corp.’s Symmetrix Remote Data Facili- 
replicate data among the data 
centers. also uses backup software 
from Oceanport, N.J.-based Comm- 
Vault Systems Inc. central manage- 
ment tool. 

“If this site were bombed 
have servers running replace them, 
but still have restore data from 
tapes,” Lilly says. soft- 
ware transfers between 60GB and 65GB 
data per hour. would few 
hours before got people online.” 

Lilly’s team also keeps copy 
disaster recovery procedures home. 
“Team leaders notify everyone, and 
carry cell phones and BlackBerries 


that are redundant networks,” 


says. “It’s pretty unified messaging 
platform ... that ties data, voice, fax 
and video into one application. They 


can get hold anytime, anywhere.” 


Massive Power Outages 
Edward Koplin, engineer Jack 
Dale Associates PC, engineering 
firm Baltimore, says lack disas- 
ter testing the No. cause data 
center failures during blackout. 
Koplin suggests that companies test 
their diesel generators often and full 
load for long they’re expected 
use during blackout. 

The Uptime Institute’s Brill adds 
that advice: Always prepare for 
blackout with least two more gener- 
ators than needed, and test them lit- 
erally pulling the plug. would test 
for long expected work un- 
der load. that least every two 
three years. And would run 
the summer,” Brill says. 

Jim Rittas, security administrator 


date and make sure employees are 
well versed them 

@ Seek vendors with plenty of 
longevity and geographically dis- 
persed offices for disaster recovery. 
Make sure portals your outsourc- 
ing vendor are dedicated have 
enough bandwidth handle multiple 
companies seeking fast restores. 

Make sure that not just your vendor 
but you understand how back 
and restore systems. 

Verify that backup tapes can 
restore data. 

Train and involve all personnel 
the disaster recovery process. 


responsible for networking Mizuho, 


says the company can now perform full 
data restores after blackouts other 
disasters hour instead two 
days because now mirrors its data 


New Jersey office that’s also active 
work site. “The other thing did was 


diversify our Internet connections. 
Internet connections now flow and 
out New York and New Jersey, 
where only had one New York 
before,” Rittas says. 

Needham, Mass.-based research firm 
TowerGroup recommends turning 
parts disaster recovery business 
continuity data centers into profit cen- 
erations model. Traditionally, compa- 
nies have set active primary data 
center and unmanned backup site. 
active/active eliminates the 
need for staffers relocate 
disaster because they’re permanently 
stationed the disaster recovery site, 
which also used run active busi- 
ness applications. 

Integrating disaster recovery 
assets and personnel into operations 
budgets across geographically dis- 


persed data centers will also help blur 


the line between disaster recovery and 
operations spending. 

It’s best have complete copy 
your data alternate site all 


| times, “not just some of it,” says Wayne 


| 
| 


Schletter, associate director global 
technology Mizuho Capital Markets. 
“You don’t want piecing things 
together after something happens. You 
just want ready go.” 45444 


LESSONS FROM THE BLACKOUT 


Even where recovery efforts went swimmingly, experts 
and IT executives found lessons to learn trom the 
Northeast’s blackout of 2003 
QuickLink 42257 
www.computerworld.com 
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ISASTER RECOVERY un- 

pleasant task. And that makes 

almost all companies, says 

Scott Lundstrom, analyst 
AMR Research Inc. 

“There are users screaming over 
business continuity,” says. “So given 
the firefighting nature most orga- 
nizations, [disaster recovery] never 
gets the resources deserves.” 

Because disaster recovery takes 
a back seat to other IT projects, mis- 
takes are bound happen. asked 
managers and other experts what’s 
most likely forgotten over- 
looked disaster recovery planning. 
Here are the five classics. 


MISTAKE 
Failing your homework. 


and line-of-business 


1 executives which 


applications they 


need most. This 

leads faulty as- 
sumptions about disaster recovery 
priorities. particular, tends 
assume that heavy-duty enterprise ap- 
plications should restored first. 

reality, the most needed applica- 
tions may much more basic e-mail 
and scheduling tools such Microsoft 
Outlook, for example. How you find 
out? Ask the users. “The business itself 
needs plan case operations are dis- 
rupted,” says Elbert Lane, lead soft- 
ware developer San Francisco-based 
retailer Gap Inc. and 20-year veteran 
disaster planning several compa- 
nies. need procedures for do- 
ing paperwork, etc., the question is, 
How would they recover? That’s not 
just issue, but business 

THE LESSON: constantly hears the 
term mission-critical used reference 
CRM and ERP software. But find 
out which applications the users really 
want restored first, simply ask them. 


MISTAKE 
Thinking it’s purely issue. 
formance the 
staff may the 
least company’s 
worries. common 
assumption that 
disaster recovery 
and business continuity are synony- 
mous,” says Don O’Connor, CIO 
Southern California Water Co., utility 
based San Dimas. “They’re not.” 
tions have done some thinking about 


” 


Here 


are the five most common errors 


that companies make when preparing for 
disaster. Steve Ulfelder 


what when disaster strikes. But 
can the same said other groups? 
“In experience, can respond rel- 
atively quickly,” O’Connor says. “The 
part that’s missing the users.” 

THE LESSON: Company officers need 
understand that rebooting systems 
and recovering data just one part 
the problem. Disaster recovery plans 
need include line-of-business man- 
agers and end users who, crisis, 
will run the business the midst ad- 
versity. “Too often, continuity some- 
thing task with,” Lundstrom 


says. “It’s really business issue.” 


MISTAKE 
the last war. 
If, the saying 
preparing 
fight the last war, 
too many enterpris- 
spend their disas- 
ter recovery bud- 
gets and energy preparing for the 
most recent catastrophic event. While 
understandable, this self-defeating; 
disasters are, their nature, well-nigh 
impossible predict. 

Recent history offers compelling 
example. The Sept. ll, 2001, terrorist at- 
tacks the World Trade Center devas- 
tated many New York-based financial 
services firms. Many wished they’d had 
nearby backup facilities, and they pro- 
ceeded build such facilities great 
expense across the river Jersey City, 
But Manhattan’s next major busi- 
ness-continuity crisis the August 
2003 blackout took out electricity 
Jersey City well. 

THE LESSON: While it’s sensible 
consider certain broad crisis categories 


(terrorist hacker attacks, earthquakes, 


fires and on), don’t think you can an- 
ticipate future events. Plan not for spe- 
cific crises, but rather for their effects. 
The Gap had servers located the 
World Trade Center Sept. Lane 
says, but “we had set them fail- 
over backups located the South.” 


MISTAKE 
Overlooking the people. 


This another les- 
son from Sept. 
Top-notch backup 
equipment helps 
only somebody 
able use it. “Some 
businesses had re- 
covery data centers 


Lower Manhattan,” says Carl 
Claunch, analyst Gartner Inc. 
However, says, immediately follow- 
ing the collapse the World Trade 
Center towers, “police let 
people in. The equipment was fine, but 
just sat there unused.” This can hap- 
pen building quarantined, ele- 
vator stuck major road closed. 

The other part this gotcha the 
expertise those who finally access 
backup equipment. Too many compa- 
nies especially those that fudge their 
recovery exercises count hero- 
ics pull them out crisis. Howev- 
er, the Gap’s Lane says, “you never 
know key personnel will back.” 

THE LESSON: This where strong 
documentation comes in. “We fashion 
our document anyone the busi- 
ness should able restart appli- 
cation,” Lane says. “You should able 
have somebody from the mail room 
start everything up.” 


MISTAKE Conducting 
practice drills. 


“Sure, companies 
testing. But because 
full tests are re- 
source-intensive, 
they’re scheduled 
advance,” Claunch 
says. The result: 

workers, driven the natural desire 
ace test, cheat. “They prepare. 
They collect tools, review procedures,” 
says. “Then, when real disaster 
hits, blooey.” 

This sticky problem for orga- 
nizations stretched thin even before dis- 
aster planning factored into their 
workloads. Lane says practices the 
Gap are planned advance. “We are 
retailer; need support our stores” 
around the clock, says. 

THE LESSON: There easy answer 
here. Everybody concedes that surprise 
disaster tests are more effective, but 
performing one round-the-clock, 
e-business environment massive 
undertaking. Claunch suggests surprise 
tests one subgroup time, leav- 
ing the rest the staff run opera- 
tions. And some businesses use audi- 
tors make sure workers don’t lean 
prepared information. 45392 
Ulfelder Computerworld contributing 
writer Southboro, Mass. Contact him 
sulfelder@charter.net. 


OUNCE PREVENTION 


A California law that requires hospitals in the state to 
be earthquake-proof gives companies an opportunity 
to revamp and modernize their IT infrastructures: 
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for the building? How you get 
electrical grid shut down? What 
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extraordinary systems access. Organizations 
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organization, apply attend one 
Computerworld’s upcoming complimen- 
tary one-day summits Business 
Intelligence. 
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The only way succeed with applica- 
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USINESS-TO-BUSINESS depen- 
dencies create the opportuni- 
for great benefits. But ifa 
disaster strikes any company 
the supply chain, the risks 
all are equally great. 

Ryder System Inc., customers 
routinely vet their supply chain part- 
ners ensure that they meet mini- 
mum standards for robustness and se- 
curity. “If they can’t make the cut, 
business with them,” says 
Chuck Lounsbury, senior vice presi- 
dent sales and marketing the 
Miami-based transportation, logistics 
and supply chain management services 
company. “We don’t want jeopardize 
the capabilities all the other compa- 
nies involved.” 

“It matter working together,” 
adds Richard Arns, executive director 
the Chicago Research Planning 
Group, which spun off post-Sept. 
effort called the Security Board. key 
lesson from the terrorist attacks, 
says, that organizations should en- 
large their circle preparedness. 

But that message may not getting 
through. American Management 
Association survey conducted last year 


showed sharp increase the number 
companies with crisis plans, drills 
simulations. Yet only about third 
those companies reported having on- 
going and backup emergency commu- 
nications plans with their suppliers. 

make their operations truly disas- 
ter-resistant, managers should de- 
termine business partners are ready 
handle disaster, experts say. Then 
they must work closely with those sup- 
pliers achieve parity their disaster 
recovery efforts and get their recovery 
times sync. Here are some more tips: 


TIP: Tighten SLA Language 


good starting point, says Roberta 
Witty, analyst Gartner Inc., the 
language the service-level agree- 
ment. SLAs are normally applied 
providers but also offer framework 
for talking about critical support 
from partners. But that’s only the be- 
ginning. Witty says managers 
should conduct internal inventory 
assessment determine which points 
outside the enterprise are critical 
company’s functions. They should 
then extend the process suppliers. 
“Have conversation with them 


Get Sync 
Suppliers 


disaster for your trading partners could 
mean disaster for you. Alan Earls 


WENDY WAHMAN 


KNOWLEDGE CENTER DISASTER RECOVERY 


Survey Snapshot 
Does your company require business 


BASE: Or Online s ine su survey 0 


about what the risks are within their 


own supply chain,” she says. “You are 
outsourcing functions; maybe they are, 
too.” may worthwhile line 
backup suppliers for your outsourced 
services you have more redundancy 
and encourage partners the 
same, says Witty. any case, each 
step the supply chain including 
with your internal operations, your out- 
sourcers, your suppliers and their out- 
sourcers and suppliers there needs 
credible recovery plan, she says, 
“or their disaster will become yours.” 

And nothing beats testing. When- 
ever possible, it’s good idea in- 
clude partners your own tests and 
vice versa, Witty says. 


TIP: Test ERP Connections 


Jim Grogan, vice president alliances 
SunGard Data Systems Inc. 
Wayne, Pa., says he’s seeing more 
clients embrace the ideal the real- 
time enterprise. And enterprise appli- 
cations, such ERP software, that 
support that vision almost invariably 
have links outside the organization. 

“We encourage [clients] 
information-availability study their 
trading partners and suppliers, even 
they have foot the bill,” says. 

Most worrisome Grogan the 
fact that many organizations have en- 
trusted key business processes soft- 
ware the point that unaided hu- 
mans would have difficulty handling 
those functions their own. 

“Even few years ago, you could 
count someone being able get 
the phone and fix things,” says. 
Likewise, Grogan notes, phone com- 
munication used planners’ first 
priority. But not anymore. “Now, 


www.computerworld.com 


everyone tells that the first thing 
they need get back business with 
partners e-mail,” says. 

granular level, Grogan says Sun- 
Gard always looks for potential single 
points failure within supply chain, 
such server, switch cable upon 
which many operations depend. Com- 
panies also need coordinate their re- 
covery plans because for many appli- 
cations, particularly ERP, “systems are 
connected real time with others that 
may have different recovery times 
different recovery points, which can 
complicate efforts get back busi- 
ness,” says. 


TIP: Secure Partner 
Communications 


It’s also important look the secu- 
rity business partner communica- 
tions because glitches that area 
could precipitate disaster. Nick Brig- 
man, vice president strategy Red- 
Siren Inc., security management 
firm Pittsburgh, says it’s important 
understand whether connect- 
partners via private network, 
virtual private network the Internet. 

One the best ways enhance the 
security that communication 
assign “least-privileged” accounts 
partners that define the nature and 
even the volume expected traffic, 
says Brigman. This not only eliminates 
potentially spurious communications, 
but also provides basis for detect- 
ing abnormal activities, says. 

Finally, John Jackson, vice president 
IBM Business Continuity and Re- 
covery Services, says business-to-busi- 
ness dependencies make critical for 
companies “get together and 
business impact analysis determine 
how their individual recovery times 
could made mesh.” 

“In some cases, companies find that 
they are doing far more than their part- 
ners, and their partners either have 
catch up, they need consider 
spending less, since they really 
get much benefit,” says. 

Communication infrastructure the 
key, Jackson adds. Partners, especially 
smaller ones, may not have the knowl- 
edge needed ensure robust and re- 
silient performance. And they may just 
need help get there. 45533 


Earls writer Franklin, Mass. 
Contact him alan@alanearls.com. 


KNOWING WHOM TRUST 


Don Houser, a security architect at Nationwide Mutual 
Insurance, developed a technology that lets business 
partners set standards for working together: 


QuickLink 45531 
www.computerworld.com 


8 A ‘ 
> 
Vv... 
= 
< 4 
ts 
4 


www.computerworld.com 


KNOWLEDGE CENTER DISASTER RECOVERY 


COMPUTERWORLD April 19, 2004 


Nothing gives 


Reality 


you warts-and-all 


experience like testing your disaster 


recovery plan the real world. 
Robert Scheier 


recovery plan, you 

get out from behind your desk 

and step out into the real world. 

Because the real world, the 
backup site lost your tapes, your emer- 
gency phone numbers are out date, 
and you forgot order Chinese food 
for the folks working around the clock 
your off-site data center. 

“Unless it’s tested, it’s just docu- 
ment,” says Joyce Repsher, product 
manager for business continuity ser- 
vices Electronic Data Systems 
outsourcing and services pro- 
vider Plano, Texas. 

How often should you test? Several 
experts suggest real-world testing 
organization’s most critical systems 
least once year. the wake 
Sept. and with new regulations hold- 
ing executives responsible for keeping 
corporate data secure, organizations 
are doing more testing than they did 
years ago, says Repsher. exclusive 
Computerworld online survey 224 
managers supports that assertion, indi- 


IRLD, FRAMINGHAM. MASS... FEBRUARY 2( 
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cating that 71% had tested their disas- 
ter recovery plans the past year (for 
more survey results, see page 35). 
Desktop disaster recovery testing 
involves going through checklist 
who should what case disas- 
ter. Such walk-throughs are neces- 
sary first step and can help you catch 
changes such new version 


done, the 


application that will trigger other 
changes the plan. They can also iden- 
tify the most important applications, 
says Repsher, “before moving the ex- 
pense more realistic recovery test.” 
Companies desktop tests dif- 
ferent intervals. Fluor Fernald Inc., 
which handling the cleanup gov- 
ernment nuclear site Fernald, Ohio, 
does both desktop and physical tests 
its disaster response plans every three 
years “or anytime there’s significant 
change our hardware 
says Jan Arnett, manager systems 
and administration the division 
engineering giant Fluor Corp. 


Critical? 


Determining which systems need 
live test also critical. Fluor Fernald 
schedules live tests only about 
its most critical applications and then 
tests only one server running repre- 
sentative sample these applications, 
says Arnett. “We feel can bring 
one server up, can bring servers 
up,” says, especially since the com- 
pany uses standard Intel-based servers 
and networking equipment. 

The most common form live 


testing parallel testing, says Todd 


Pekats, national director storage al- 
liances services provider Compu- 
Com Systems Inc. Dallas. Parallel 
testing recovers separate set criti- 
cal applications disaster recovery 
site without interrupting the flow 
regular business. Costly and rarely 
most realistic test full 
switch critical systems during work- 
ing hours standby equipment, which 
Pekats says appropriate only for the 
most critical applications. 

Businesses that are growing 
changing quickly should test their dis- 
aster recovery plans more often, says 
Decker, executive director securi- 
and privacy services EDS. cites 
one firm that has grown eightfold 
since 1999, when its disaster plan 
called for the recovery critical sys- 
tems hours. Today, just mounting 
the tapes required for those systems 
would take four days, says. 

Deciding how realistic make the 
test “is balance between the amount 
protection you want” and the cost 
money, staff time and disruption, says 
Repsher. organization’s disaster 
recovery program matures, the tests 
its recovery plans should become more 
challenging, adds Dan Bailey, senior 
manager risk consulting firm Protiv- 
iti Inc. Dallas. While the more real- 
istic exercises provide more lessons 
about what needs improvement, 
says, organization just starting out 


configuration,” 


disaster drill isn’t much good 
everyone coming. 

But too many orge 
disaster tests weeks ahe 
ship special backup files to an off- 


scrint 
IZatlons SCript 


2ad of time, 


site recovery center and even make 
hotel reservations for the recovery 

staff, says John 
dent busine 


kson, vice presi 
resilience and conti- 


ter. 
the 
the disaster recovery p 

That makes the test more “excit- 


le 
nth 


ing,” acknowledges, but talso 
makes it a lot more useful 
Robert Scheie 


with rudimentary plan probably can’t 


handle very challenging drill. 


Never assume that everything will 


planned. That includes anything 


from having enough food desks 


recovery site having up-to-date con- 


tact numbers. Communications prob- 
lems are common, but they’re easily 
prevented having every staff mem- 
ber place test call everyone 


their contact list, says Kevin Cheno- 


weth, disaster recovery administrator 
Vanderbilt University Medical Cen- 
ter Nashville. 

Also, never assume that the data 
your backup tapes current that 
your recovery hardware can handle 


your production databases. Arnett 


found subtle differences the drivers 
and network configuration cards his 
replacement servers that forced him 
load older version his Oracle 
database software recover his data. 
Chenoweth his staffers review 
each test with the affected business 


units and develop specific plans (with 
timelines) for fixing problems. 


Finally, Chenoweth says, thank 
everyone for their help, especially the 
test kept them away from home. “If 
got good relationship, they’re 
more likely responsive” the 
firm’s disaster recovery needs, says. 
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Scheier Computerworld contribut- 


ing writer Boylston, Mass. can 


reached rscheier@charter.net. 
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Restoring Data Tapes 
After the Coffee Spill 


your store’s night manager driv- 
ing home with the backup tapes, has 
slam the brakes. Hot coffee spills 
onto the tapes, turning them into 
wet, wrinkled mess. Can you still re- 
cover the data? The folks Exabyte 
Corp. say that their VXA drives can 
read VXA-formatted tapes that have 
been subjected boiling water, coffee, 
ice volcanic ash. 

The trick that Exabyte’s VXA drives 
read the data tiny packets the 
magnetic tape instead using the con- 
ventional method reading the skinny 
tracks that run along the length the 
tape from beginning end [QuickLink 
The VXA drives collect the ad- 
dressable packets and reassemble them 
with error-checking procedure it’s 
similar the way the packet-switched 
Internet works, says Kiernan Maloney, 
Exabyte general manager Boul- 
der, Colo. the drive misreads 
packet perhaps because wrinkle 
for the missing packet, Maloney says. 

course, only backup tape gener- 
ated VXA drive can read 
VXA drive. 


Y2k Mixed Bag for 


Disaster Recovery Pros 


The year 2000 date rollover crisis has 
had both positive and negative effects 
the disaster recovery field, long- 
time observers say. the positive 
side, drew lot attention estab- 
lishing contingency plans and had 
companies talking their vendors and 
suppliers about disaster scenarios, says 
Dan Bailey, senior manager Protiviti 
Inc., risk consulting company Dal- 
las, and member the professional 
groups DRI International and the As- 
sociation Contingency Planners. 

But Y2k turned out nonevent 
because the efforts that went into 
fixing systems. But the success 
those efforts created credibility prob- 
lems for disaster recovery specialists 
and led complacency among senior 
executives, Bailey says. 

Chief financial officers who OK’d 
$20 million upgrade systems for Y2k 
only have nothing happen may 
wonder whether that was money well 
spent, says Tim DeLisle, managing 
principal Corigelan LLC, disaster 
recovery consultancy Chicago. 
asks for another $30 million upgrade 
disaster recovery capabilities, those 
executives are going skeptical, 
“you need build business case for 
risk management,” DeLisle says. 

The other problem that 
some companies figure they addressed 
all their disaster recovery issues the 
Y2k plan that’s sitting the shelf. But 
many their systems and operations 
have changed since 1999, those plans 
are virtually worthless now unless 
they’ve been updated, DeLisle says. 


Three Tips 

From: Dorian Cougias, CEO Network 
Frontiers LLC San Francisco and author 
The Backup Book: Disaster Recovery 
From Desktop Data Center (Schaser- 
Vartan Books, 2003). 

TIP NO. Figure out how recover 
from “stupid-user tricks,” such the 
user who accidentally drags empty 


file directory top very important 
file directory and wipes out, the 
janitor who disregards the “Don’t touch 
this switch” sign. Ask your help desk 
staffers list the problems they’ve 
dealt with the past months. 

TIP NO. Have disaster recovery plan 
for your e-mail system, the most-used 
system the network. Consider 
product like the Emergency Messaging 
System from MessageOne 
Austin. 

TIP NO. Make sure each 
daily, weekly monthly work proce- 
dures include disaster recovery prac- 
tices, just like sailor’s duties include 
checking the rigging and pumps 
before every excursion. 


Patent Watch 


data storage system that provides 
real-time data backup when hazard 
sensor detects imminent disaster. 
The system alters the backup process 
minimize the amount lost data. 
Patent No. 6,684,306, issued Jan. 
27, 2004. Inventors: Teruo Nagasawa, 
Takahisa Kimura and Takeshi Koide, for 
Hitachi Ltd. Tokyo. 

targeted early-warning system for 
disasters. Local residents are warned 
fast-moving disaster via code 
and brief text message sent the 
caller screen their telephones. 
US. Patent No. 6,594,345, issued July 
15, 2003. Inventor: Keith Vinson, for 
BellSouth Corp. 45976 


ONLINE CHECKLIST 


The Federal Emergency Management Agency has a 
basic checklist for business recovery from disasters 
on its Web site: www.fema.gov/ofm/be 
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Billion-Dollar Weather Disasters 


2003, states the South had more billion-dollar weather disasters such hurricanes 
and floods - than other states in the continental U.S. This map shows the frequency per state of weather 
disasters that have resulted in over $1 billion in damages during that period. 
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Disaster Budgets 


What percentage your 
organization’s budget earmarked 
for disaster recovery? 

by 


24% 


Plan Updates 
How recently has your disaster 
recovery plan been revised? 


BASE: Online survey of 222 IT professionals at 
organizations that have a disaster recovery plan 
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Remote Backups 


How often remote-office data 
backed your organization? 


the remote users 


BASE: Online survey of 281 IT professionals 
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MARK HALL 


Mom 


pointed. You might fired. 


MONG THE NUGGETS WISDOM that fell from mom’s lips, favorite is: 
“Expect the worst. You’ll never disappointed. 


” 


you’re planning move portion your operations India, your 
disaster recovery plan had better involve risk management assessment 
loaded with worst-case scenarios. Otherwise, you might not just disap- 


Like the U.S., India prone natural disasters. There are floods. Winds and 
cyclones cause destruction every year. Earthquakes happen. 


But unlike the U.S., India benefits from disaster re- 
covery programs sponsored the United Nations, 
presumably because the country’s infrastructure 
more fragile than those other nations because its 
ability respond less robust. Even the U.S., with its 
notoriously parsimonious aid developing nations, 
includes special funding program for disaster recov- 
ery India. Perhaps India increases its wealth 
importing jobs from this country, will reciprocate 
kind one day. 

Today, however, the recipient out- 
side disaster recovery help, fact keep 
mind when you consider what appear 
low-cost offshore services. 

All this isn’t say that the buildings that 
house data centers Bangalore are more 
risk being hit by, say, earthquake than 
those perched along the San Andreas fault 
Silicon Valley. There’s far less risk 
earthquake India, fact. But just case, 
better make certain that your off- 
shore outsourcer has picked its site and 
built its building with nervous eye the 
Richter scale. the outsourcing rep san- 
guine and assures you that you 
worry about such thing, better worry. 

Just like any nation plagued natural disasters, the 
has mixed record getting regions off their 
knees after Mother Nature has whacked them with 
hurricanes, floods, tornados and temblors. The Federal 
Emergency Management Agency has been both 
praised and damned over the years for its responses 
one tragedy another. That’s why smart organiza- 
tions don’t even consider the possibility aid from 
FEMA when they’re designing their companies’ disas- 
ter recovery plans. They expect handle any prob- 
lems themselves. 

But recent conference where Indian outsourcers 
were pitching their cost-effective, highly talented 
workers software vendors, heard about the close 
cooperation between the Indian government and out- 
sourcers “in everything from tax incentives disaster 
recovery.” Hmmm. 

well advised deal with companies like 


Sonata Software Ltd., which doesn’t lean the Indian 
government and backs the data center its Banga- 
lore headquarters replicant server room hundreds 
miles east, across the mountains the coastal city 
Chennai. Others, like Wipro Ltd. and Tata Consul- 
tancy Services, offer very similar disaster recovery 
plans for their customers. Anything less than fully 
redundant data center is, mom would have drily 
said, courting disappointment. 
you had have disaster recovery plan only for 
your data India, the situation would 
easy. But you need one for people, too. 
disaster strikes (and will), does 
your outsourcer have plan for how soon 
key employees will the job ensure 
that your business gets back track? For 
example, does the company have private 
transportation plan the event that public 
transit comes standstill? And given 
that the CIA labels India’s communications 
systems having “mediocre service,” how 
will your outsourcer deal with outages af- 
ter disaster? 

Also, think it’s absolutely essential that 
you hold your Indian outsourcer disas- 
ter recovery standards that are higher than your own. 
Why? Because you’re not there. 

few years ago, was the Seattle area shaking 
hands with Boeing’s vice president charge com- 
puting and communication systems when earth- 
quake struck. After the first round ground wobbling 
stopped, people evacuated the buildings and met 
predetermined gathering points. The took single 
call his cell phone and chatted with couple un- 
derlings accordance with IT’s disaster plan. was 
calm, even lighthearted. wondered why. 

said, “Oh, can see that everything taken care 
of. People are OK. Systems are OK.” 

could “see” because was there. That’s why 
your Indian (or your Canadian Irish) outsourcer 
needs held higher standard for disaster re- 
covery because you able see for your- 
self. mom also used say, “Seeing believing.” 
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Get Rid the 
Save Space. 


Manager, your greatest challenge could 
The Box where put that big BOX! Cybernet has 
created innovative, all-in-one, Zero-Footprint-PC. 
The entire fits inside normal size keyboard! 


This design has helped many businesses nationwide 
save valuable space. 


STANDARD FEATURES: 
Intel® Pentium® Processor 2.80GHz/533 FSB 
128MB DDR333 SDRAM 2GB 
40GB IDE 7200 RPM hard drive, any size 
10/100 Ethernet, USB 2.0, IEEE1394 Firewire, Serial Ports 
2-Year Limited Warranty 


All these features are inside the keyboard! 
entire inside keyboard 


OPTIONS: 
internal slim CDRW/DVD « Internal floppy * Internal fax modem ¢ DVI (Digital Video) As low as 


Parallel Port * TV-Out (NTSC/PAL) * Plastic Skin Protector * LCD Displays: 15", 17", 
18" and 19” (touch screen available) * Wireless 802.11b/g available 


Runs all Microsoft™ Windows 98/2K/XP/NT operating systems. 
U. S. Patent Pending. © 2004, Cybernet Manufacturing, Inc. all rights reserved. The CYB = RMN = i 


Cybernet logo and Zero-Footprint-PC are trademarks Cybernet Manufacturing, Inc. Space Saving Technology 

Intel, intel Inside, Pentium, Celeron are trademarks, or registered trademarks of intel 

Corporation, or its subsidiaries in the United States and other countries. All other regis- 

tered trademarks are property of their respective owners. Prices and specifications are For product specs and model options visit us at: www.cybernetman.com, 
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How does your rack really stack up? 


Take the APC Rack Challenge and find out how 
the New NetShelter® outperforms your brand. 


Whether you are consolidating servers, relocating your data center, centralizing 
distributed networks, selecting the right brand enclosure crucial successful 
implementation. Take the APC Rack Challenge today make sure your facts and 
your racks really stack up. 


Name: 


Company: 
Address: 


How many racks do you currently have installed? 


Rack 


no side panels 


Designed specifically for the cabling, 
cooling and security demands of today’s 
IT environments, the NetShelter® VX is a 
complete infrastructure compatible with a 
full range of integrated APC components. 
Vendor-neutral, all you need to add are 
the servers of your choice. 


Integrated rear power distribution 
channels that provide zero-U, 
toolless mounting of basic, 
metered, and switched rack-mount 
power distribution units. 


Integrated rear cable management 
channels that allow efficient cable 
routing and easily accessible 

cable containment. 


NetworkAiR”™ RM Air Distribution Unit 
Available with scalable 


cooling options to support / unit delivers additional cool 
heat densities air and improves circulation. 


Exceeds major server requirements 
for front door ventilation. 


Rack-mount LCD 
Monitor/Keyboard Drawer 


InfraStruXure compatible. Maximizes space 
Seamlessly integrates into data center environments. 
modular, manageable, pre-engineered 

data center architecture. 

Vendor neutral rack configurator Environmental Monitoring Unit 
designed to support most third party { ; Monitors ambient temperature, j 
servers and networking devices. humidity and other environmental 


a “Fits Like a Glove"*™* money back 
S guarantee that all IT equipment 
will fit the rack. 


Compare! Savings 
almost 40% 


Rack-mount PDU 


Provides up to 5.7kW of power, ie 
eliminating the need for multiple 
outlet strips per rack. Available for “ 
both single- and 3-phase input power. 


Yes! 


I took the 


APC RACK 
CHALLENGE! 


*Based on APC Internal Research and testing. ** See link on 
promotions page for terms and conditions. t Source of 
average pricing: www.HP com. Prices may vary or change 

from time to time. Not applicable to other SKU's or models. 


Arc 


Legendary 


1) Fill in your business information, 
indicate your rack brand of choice, 
and check off the applicable fields. 

Fax the completed Rack Challenge 


to the following number: 
Fax 401-788-2797 


Be one of the first 100 respon- 
dents and receive FREE took 
the APC Rack Challenge” T-shirt! 


n, RI O02 SA NSTA4EF-USa 


©2004 American Power Conversion Corporation. All Trademarks are the property of their owners © Call: 888-289-APCC x6699 E-mail: esupport@apcc.com © 132 Fairgrounds Road, West Kingsto' 
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p ivee to any senior business leader across the 
United States, and it takes little time to get 
around to a major concern — having enough 
technology workers for the future. It's a hard 
message to sell after three steady years of layoffs 
and off-shoring of work in the technology sector. 
The concern is real, however, as other countries 
boast of growing numbers of engineering and 
technology workers — workers who may create 
the next great breakthrough. Add to the 
competitive concern the recent uptick in hiring. 
Companies such as Lockheed Martin have 
announced plans to hire up to 60,000 new 
workers in this decade, in large part due to 


Advertising Supplement 


Careers and Diversity 


retirements but also to fill the need for advanced 
technology workers. 


The competitive issue is real, too. China 
graduated more than 300,000 engineers in 2003; 
India had more than 200,000. Here in the United 
States, the number of engineering graduates was 
slightly over 78,000. 


It’s one of the many reasons that the Information 
Technology Association of America, the National 
Action Council for Minorities Engineering, and 
the Commission Professionals Science and 
Technology along with individuals such 
Tyrone Taborn, founder of Career Communications, 


and companies such as IBM -- continue to pound 
home the message: technology careers need to 
appeal to a broader range of society; we need 
more young people of color and who are female 
to seek tech careers. 


Jim Sinocchi, spokesman for IBM's diversity 
initiative, said this year's Black Family Technology 
Week (founded by Taborn) and La Familia 
Technology Week scheduled for October 2004, 
continue to develop and reach out to more and 
more communities. The focus is on hands-on 
experience with technology. “The celebrities of 
science and technology are telling the story,” 
Sinocchi explained. 


This year's Black Family Technology Week in 
February showed applications of technology in 
everything from music to movie production. 
During La Familia Technology Week last fall, 
Miyeara Major highlighted her use of computer 
data in identifying a previously undiscovered 
primate. It didn’t hurt that Major could tell her 
story of transition — from professional football 
cheerleader to scientist. “There is not a metric on 
how well we succeed with young people,” 
Sinocchi added. “You can only listen to how 
many questions they ask and the ‘wow’ factor.” 


While appealing to young people involves 
showing how technology leads to careers and 
role models, it also means showing them the 
schools that attract and retain diverse students. 
While these colleges are heavily weighted by 
geography and membership in Historically Black 
Colleges & Universities, another option is 
emerging — eArmyU. The U.S. Army's distance 
education programs offers coursework to 
enlisted soldiers, many of whom are minorities. 
eArmyU expects to serve 80,000 soldiers over the 
next five years. 


early 
next 
Scholarships 
Available!" 


Earn your degree online! 


Use your experience certification toward the completion your degree. 


Flexible programs for busy adults: 

Computer Information Systems 

Information Technology Network 
Information Technology 


Your may waive some degree requirements. 


Online. Accelerated. Affordable. Accredited. 


Regionally accredited 


66-225-5 


JAVA PORTAL DEVELOPER / 
TECHNICAL LEAD - A company 
with an office in Andover, Massa- 
chusetts, engaged in investment 
management for retail and insti- 
tutional clients, has a immediate 
need for a highly skilled Java 
Portal Developer / Technical 
Lead. This experience-intensive, 
hands-on technical lead / men- 
toring programmer position is re- 
sponsible for creating, maintain- 
ing and documenting large-scale 
E-commerce portals based on 
converted-into-Java NetDynam- 
ics™ code, and containing multi- 
ple form-based applications; the 
position is also responsible for 
the development of Epicentric 
modules, J2EE java, and SOAP- 
based systems. The position 
also involves 24-hour / 7-day on- 
call availability. The position's 
duties include the rapid develop- 
ment and deployment of large- 
scale E-commerce prototypes 
containing Adobe Acrobat™ 
SDK-developed components, 
and working models custom 
developed for the financial ser- 
vices industry; the creation of 
web sites using Epicentric's 
Foundation Server™ and devel- 
opment of custom modules; the 
utilization of the SUNONE™ Ap- 
plication Framework to develop 
Java code, and to conduct per- 
formance optimization using 
automated testing tools; the cre- 
ation of web services using 
Simple Object Access Protocol 
("SOAP"); and the production of 
high quality design documenta- 
tion and user manuals. Minimum 
education required is Bachelor's 
degree in MIS, CS, or Math. Min- 
imum experience required is at 
least 8 years post-degree busi- 
ness applications programming 
experience, at least 4 years of 
which specifically involved Java 
and NetDynamics™. Base salary 
is $ 82,500 per year. Benefits in- 
clude fifteen days paid vacation, 
contributory medical, dental, dis- 
ability, life insurance, and other 
industry-competitive benefits. 
Qualified applicants respond with 
two (2) copies of resume only to: 
Case # 200203977, Labor 
Exchange Office, 19 Staniford 
Street, 1st Floor, Boston, MA 
02114. An EOE/MFHV. 


For more information about Careers advertising, 


please contact: Nancy Percival 


Vice President, Recruitment Advertising 


500 Old Connecticut Path 


Framingham, 01701 


10 Producers of 2 can American BS £ eers oducers of 2001 Women BS Engineers 
nstitution of Grads # of Grads 
North Carolina A&T 166 gia Institute of Technology 330 
Georgia Institute of Technology 112 University of Michigan 309 
Tennessee State University 97 Penn State 249 
Florida A&M 93 University of Puerto Rico 222 
Morgan State University 88 University of California/Berkeley 218 
Southern University 79 Texas A&M 215 
Prairie View A&M 73 Purdue ey 210 
Tuskegee University 71 Mass Institute of Technology 207 
North Carolina State-Raleigh 64 University of Illinois-Urbana 183 
University of Michigan 63 Cornell University 182 
Top 10 Producers of 2001 American Indian BS Engineers Top 10 Producers of 2001 Latino BS Engineers 
nstitution # of Grads Institution # of Grads 
Mass Inst Technology University Puerto Rico 695 
New Mexico State University 10 Poly Univ of Puerto Rico 311 
Oklahoma State University University Paso 137 
University of Oklahoma 8 Florida International University 118 
University of New Mexico 7 Texas A&M University 95 
University of University — 
Worcester Poly Institute University of Florida 
University of Michigan 6 Cal Poly Pomona 82 600.762.2977 
Tie for 9: Arizona State, Northern Arizona,Old Dominion, Texas A&M-Kingsville 65 
San Diego State, University of Alabama-Huntsville, New Jersey Institute of Technology 64 
University of Florida, Washington State University 5 

Source: National Action Council for Minorities in Engineering 


Produced Carole Hedden 


Web Developer to design devel- 
op, and modify client/server and 
web-based software on a distrib- 
uted architecture to develop fully 
interactive web-based e-learn- 
ing applications including multi- 
ple media development using 
XML/XSL, HTML (cross-browser 
development), JavaScript, 
Dreamweaver, Flash, Java, 
mySQL, SQL, JSP, ASP, and 
NET. Builds new functions and 
features on the website to 
improve the effectiveness of 
websites for business, con- 
sumer, and internal users using 
Java and JSP. Analyzes require- 
ments, creates specifications, 
and develops horizontal and ver- 
tical software applications on 
Microsoft Windows platform 
Develops, enhances, maintains 
and supports users with intranet 
applications. Requires Bachel- 
ors Degree in Computer Sci- 
ence, Information Systems, or 
Information Systems Manage- 
ment and one year direct experi- 
ence. Send resumes only, no 
calls, to: Traci Knudson, CFO, 
NogginLabs, Inc. 4619 N 
Ravenswood, Ste 303, Chicago, 
IL 60640 


Systems Analysts (ERP/ 
Financials): Analyze, design & 
administer enterprise apps. and 
systems including financials/ 
transport Admin./Mgmt. in 
Lawson Apps. (Financials/ 
Admin.), Oracle, SQL Server, 
Unix, AS400, COBOL, VB. For’ 
complete job description or to 
apply, send resume/contact 
HR/IT-SA, URSI, 10701 
Middlebelt Road, Romulus, Ml 
48174. No phone calls please. 
Principals only. EOE. 


Company seeks Sr. Software 
Eng. for design and development 
of object-oriented, distributed ob- 
ject, and component-based and 
web-based systems including 
multi-tier architectures. The Sr. 
Software Eng. utilizes relational 
d-base, ORACLE under Win- 
dows NT/2000 and UNIX (Sun 
Solaris, HP_UX) to dev. s/w in 
XML & Enterprise Java (incl 
JSP, EJB, JMS, & Serviets com- 
ponents). Application servers 
utilized incl. Webshop & Weblog- 
ic. Object-oriented systems uti- 
lized include UML, Rational 
Rose, and Visual Cafe. Salary is 
$75000/yr. f-t (40 hrs/wk). Min 
Req: Bach. or foreign degree 
equivalent in Computer Eng., 
Eng. or related + 2 years exp. in 
S/w Devipmnt using ORACLE 
under Windows NT and Unix 
(Sun Solaris, HP_UX) platforms 
in app. domains as _ follows 
Enterprise Java (inci. JSP, EJB 
JMS and Serviets), XML, and 
Object-oriented systems incl 
UML, Rational Rose, and Visual 
Cafe. Pl. submit two (2) resum- 
es to: Case #200204 180 Division 
of Career Services Labor Certi- 
fication Unit, 19 Staniford St., 1st 
fi., Boston, MA 02114. 


SQL Server Specialist, Hunters- 
ville, NC, InterCerve, Inc. Man- 
age database admin. services 
for InterCerve's managed host- 
ing operations and lead the sup- 
port and implementation ser- 
vices for a premier SQL Server 
tooi. Reqs. BAin Comp. Science 
& 4 yrs. exp/ The 4 yrs must incl 
work w/ SQL Server Admin 
product dvip. cycles & process- 
es, Windows networking, Win- 
dows 2000/2003, Active Direc- 
tory, Microsoft appl. dvip. Exp 
and .NET. 3 yrs of exp. must incl 
work w/ T-SQL, DTS, BCP, repii- 
cation, clustering, log shipping & 
writing & executing software ac- 
ceptance tests. M-F, 8-5, Send 
resume to Human Resources, 
InterCerve, Inc., 16415 D 
Northcross Drive, Huntersville, 
NC 28078. No phone calls 
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real people doing extraordinary things 


Lilly about breakthrough medicines and treatments confront many the world’s most challenging diseases. It’s only through 
our diverse workforce that are empowered discover innovative solutions that help improve lives. The varied perspectives, 
experiences, and training our employees fuel the creativity and energy that drive our company. You will find exceptionally 
diverse group people Lilly who are respected for who they are, what they do, their differences, and similarities. 


invite you learn more about challenging and rewarding careers the following areas: 


Marketing Research Development Finance Clinical/Regulatory Infrastructure Manufacturing SAP 


For more information these and other opportunities apply online, please visit www.lilly.com/careers. 


Eli Lilly and Company equal opportunity employer. 


www.lilly.com/careers 


Answers That Matter. 
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Senior Manager 


(Glen Mills, PA and other com- 
pany + client locations through- 
out the United States) Manage 
design/execution of manual + 
automated conversion of data 
from Mainframe-based systems 
to Oracle 8i including planning a 
conversion strategy, developing 
program specifications and con- 
version programs, overseeing 
datz entry conversion efforts 
and conducting data loads to tar- 
get systems. Evaluate technolo- 
gy options, prepare cost/benefit 
analysis and conduct Business 
Process Re-engineering and 
analysis in order to develop 
business cases to _ identify 
appropriate solutions and rec- 
ommend changes to existing 
processes for public sector 
agencies. Responsible for man- 
aging client relations and 
addressing risk assessment and 
scope management issues as 
well as developing work plans, 
project budgets, and reviewing 
client deliverables. Oversee 
web-based systems implemen- 
tation projects for public sector 
agencies. Draft responses to 
RFPs (Request for Proposal) by 
public sector agencies and write 
proposals for selling engage- 
ments in order to identify oppor- 
tunities to sell businesses to 
new and existing clients. 


Salary: $111,132/year. Work 
schedule is M-F 9am-5pm 
Position requires: Master's 
degree in Business Admin- 
istration, Public Policy Manage- 
ment, Engineering or Info 
Systems plus 4 years experi- 
ence in the job offered in related 
occupation of Senior Manager, 
Manager, Senior Consultant 
Experience in offered position or 
related occupation must include 
1.5 years of experience manag- 
ing programs for public sector 
agencies including drafting RFP 
(Request for Proposal) respons- 
es, risk assessment, scope 
management, and work plan 
development in addition to 
Business Process Re-engineer- 
ing and analysis, Testing Tool 
WinRunner and Oracle. 


Please send your resume, refer- 
encing Job Order Number WEB 
406726 to: PA CareerLink, FLC 
Unit, 235 W Chelten Ave. 
Philadelphia. PA 19144. EOE. 


Senior Systems 
Analyst/Programmer 


Translate business require- 
ments into comprehensive an- 
alysis and design models using 
UML and Rational XDE/Rose 
Build, test and deploy applica- 
tion and database components 
over Weblogic, Oracle8i, SAS 
and Unix. Assist in the develop- 
ment of asynchronous messag- 
ing infrastructures and contracts 
using JMS, XML, XSD, J2EE 
and JDBC. Position utilizes 
object-oriented analysis and 
design concepts such as pat- 
terns and frameworks. Req. 2 
years previous experience. Prev 
exp. must involve developing 
analysis and design models 
using UML and Rational XDE/ 
Rose. Apply to: BLC Consulting, 
26 Jefferson Court, Wethers- 
field, CT 06109. 


Programmer Analyst needed 
Duties include performing main- 
tenance, code and test existing 
programs; analyze and develop 
programs. Work with the follow- 
ing: VB, .Net, Oracle, Java and 
Tibco Integration Suite. Req.: 4 
yrs of rel. work exp. or a BS 
degree or equivalent and 2 
years of rel. work exp. MS 
degree preferred. Exp. must 
include 2 years developing 
mainframe, client/server, or web 
applications. No relocation. Mail 
resume, references and salary 
requirements to Inventory 
Locator Service, LLC, Attn 
Human Resources, Job Code 
1S308, 8001 Centerview Park- 
way, Suite 400, Memphis, TN 
38018 


Computers 
IT Analyst 


Multiple Openings. Research 
Triangle Park, NC. Participate 
in IT projects involving busi- 
ness analysis, project manage- 
ment, and IT strategy and sys- 
tem development for R&D IT 
department. Perform new tech- 
nology evaluations and imple- 
mentations, object oriented 
programming, statistical analy- 
sis, client server and network 
engineering, and database sys- 
tem development. Analyze 
requirements and participate in 
detailed system design. Define 
detailed systems requirements. 
Perform scope/ business 
needs analysis and benefits 
realization to develop IT solu- 
tions to meet needs of various 
business sectors. Req. 
Master's degree in CS or Info. 
Sys. Mgmt. Working knowl- 
edge, through academic 
coursework or experience, of| 
the following: Together and 
Rationale; requirement docu- 
mentation & info. modeling 
techniques incl. use cases, log- 
ical design, ER diagrams & 
sequence diagrams & testing of 
info. sys. by developing testing 
plans, test cases & test reports; 
COM, DCOM, EJB, BizTALK & 
object oriented design & pro- 
gramming; and XML & Web 
Services, Oracle Database 
Management, Oracle Forms, 
Apache & IIS 


GSK is dedicated to an innova- 
tive workplace and supports 
you with career-long opportuni- 
ties & learning. We offer a 
competitive benefits and com- 
pensation package. For confi- 
dential consideration please 
forward 2 copies of resume to 
BHG Box 33808, 220 E. 42nd 
St., 14th Fi., NY, NY 10017 
Indicating ad code "ITA" is 
essential. Principals only, no 
agencies. GSK is proud to pro- 
mote an open culture, encour- 
aging people to be themselves 
and giving their ideas a chance 
to flourish. GSK is an equal 
opportunity employer. 


Computer: Software Engineer, 
Programmer Analysts, Database 
Analyst, Systems Analyst, 
Network Admin, for NJ IT firm 
Need Bach +1 yr exp for Jr. Lvl 
positions and Masts +2 yrs or 
Bach + 5 yrs of exp for Sr. Lvl 
position. Various skill req 
Oracle, VB, PL/SQL, SQL*Plus, 
Java, JDBC, Java Serviets, RMI, 
JFC, Swing, Java Beans, C/ 
C++, Win NT/2000, MS Access 
2002, UNIX, Shell Scripting, 
Dream weaver, Websphere, 
Web logic, TOAD, HTML, 
DHTML, ASP, Javascript, XML, 
Rational Rose, Peopiesoft & 
SAP, Oracle Financials, Data- 
warehousing QA testing, 
Microsoft, .Net. Apply w/ 2 
copies of resume to HRD, 
Software Research Group, Inc., 
485 E Rt 1 South, #240, Iselin, 
NJ 08830. 


S/WEngineers to analyze, de- 
sign, develop financial appis 
using OOD.C++, VC++, MFC, 
Visual Source Safe, SQL Server, 
Rational Rose, CrystalReports, 
RAIMA, ImageMan, ADO under 
Windows/UNIX OS; perform 
system/functional req analysis; 
document detailed project 
specs, review conceptual mod- 
el with users;provide training/ 
user support for related soft- 
ware; perform debugging/modifi- 
cations of existing software 
Require: M.S. or foreignequiv. in 
CS/Engg. (any branch) with 1 yr 
exp in IT. High Salary. F/T posi- 
tion. travel involved. Resume to: 
HR, Autosig Systems, Inc., 201, 
Price Hills Trail, Sugar Hill, GA 
30518 


Computerworld InfoWorld Network World 


Programmer Analyst. Sought by 
Englewood Colorado consulting 
company to work in various 
unanticipated locations through- 
out the U.S. Duties: Analyze, 
plan, develop, test and docu- 
ment computer programs includ- 
ing network communication pro- 
grams. Evaluate user requests 
and software program require- 
ments for new and modified pro- 
grams. Write specifications, 
code, test and debug computer 
programs. Customize software 
to client needs. Use of Java, 
ATG Dynamo, Oracle, HTML, 
C/C++, Perl 5.0 and Windows 
NT. Reqs. Bachelor or equiva- 
lent in Computer Science, 
Computer Engineering, Engin- 
eering (any field) or related field 
Plus 6 mos in the job offered or 
6 mos in a related occupation, 
including Programmer, Software 
Engineer or Systems Analyst 
$66,000/year, 40/hrs/wk, 8AM- 
5PM Respond by resume to 
WORKFORCE DEVELOP- 
MENT PROGRAMS, PO Box 
46547, Denver, CO 80202, and 
refer to Job Order No. CO 
5073173 


Software Engineers & 
Programmer 

needed. Exp. 

Server Applications w/ 
ERP Packages & Web 
applications preferred. 
Seeking qual. candidates 
possessing AA/BS/MS 
degree or equiv. and/or 
rel. work exp. Send res., 
ref., & sal. req. to Saiven 
Info Links, Inc., 1425 
Louis Ave., #104, Elk 
Grove, IL 60007. 


Software Engineers 


Design and develop Enterprise 
Application Integration (EAI) 
solutions. 


Min. Educ. Bachelor's degree 
or equi. Some positions re- 
quire Master’s degree or equi 
Min. Exp. - Adequate industry 
experience. Job may involve 
working at various locations 
throughout the US. 


Please send resume to 
Selectiva Systems, Inc. 
3333 Warrenville Rd 
Suite 200 
Lisle, IL 60532 


System Analysts to analyze, 
design appls using Java, VB, 
JScript, VBScript, HTML, Orac- 
le, DB2, ASP under Windows/ 
UNIX OS; responsible for pro- 
ject planning, time & cost sched- 
ules, quality of deliverables; 
study/evaiuate new technolo- 
gies/methodologies; provide 
tech/business guidance for com- 
plex user problems; provide 
methodologies to follow; interact 
with clients. Require: Master's or! 
foreign equiv in CS/Engg(any 
branch)/Business Admin. High 
Salary. F/T. Travel involved 
Resume to: HR, Salem Associ- 
ates, Inc., 405, 6th Ave., Ste 
102, Des Moines, IA 50309. 


Software Engineer. Develop 
& implement web sites for 
client companies using 
Vignette & e-business s/w 
products. Integrate XML 
technologies & solutions into 
Java based framework & 
troubleshoot. Req: Bachel- 
or's in Comp. Sci., Comp. 
Eng., Electrical Eng., or 
Business Mgmt. 40hrs/wk. 
Job/interview Site: Long 
Beach, CA. Send resume to 
UniSAP, Inc. @ 24881 Alicia 
Pkwy, Laguna Hills, CA 
92653. 


WEB DEVELOPER to design 
and develop customized web 
applications using C#, VB.NET, 
ASP.NET, ADO.NET, XML, 
ASP, JavaScript, VB.COM and 
Object Oriented Design princi- 
ples; create a central code 
base for rapid generating sta- 
tistical analysis websites (CMI's 
QtabsTM); develop Windows- 
based applications to automate 
survey sample management; 
create VBA for statistical analy- 
sis of survey data; manage 
data in SQL Server 2000 with 
Triggers, Cursors, Stored pro- 
cedure, Functions, DTS, and 
Full-Text Index search. Re- 
quire: Bachelor's in Computer 
Science/Information Systems. 
Competitive salary offered 
Apply with resume to: Vice 
President, ConsumerMetrics, 
Inc., 1745 Old Springhouse 
Lane, Suite 400, Atlanta, GA 
30338. 


Senior internet 
Application veloper 


Affiliated Computer Services, 
Inc. (ACS) currently has an op- 
ening for a full time Senior 
Internet Applications Developer 
in its Lexington, Kentucky opera- 
tions. Must have Bachelor de- 
gree in Computer Science or 
Engineering with 5 years experi- 
ence in designing and develop- 
ing web based applications us- 
ing Java and ASP, including 
therein 2 years experience de- 
signing EDI and DDE applica- 
tions according to HIPAA regula- 
tions using Cold Fusion. Must 
have authorization to work in the 
U.S. Please send resume by 
mail to: Technical Recruiter, 
2432 Fortune Drive, Suite 120, 
Lexington, KY 40509 or via fax 
to 859-389-4182. No phone 
calls please. EOE 


Systems Analyst (GA) Design, 
develop, code, test, debug & 
troubleshoot a variety of prod- 
ucts in a client server environ- 
ments using Oracle 2000, C & 
Visual C++ on IBM compatible 
PCs & UNIX based servers 
Develop special modifications & 
internet accessing enhance- 
ments for SDL & MBB platforms 
applying Java, RMI, TCP/IP & 
EJB in Linux & Sun Solaris envi- 
ronments. Conduct change & 
impact analysis, quality reviews 
& engage in custom develop- 
ment of key modules. Bachelor's 
degree or equiv. in Computer 
Science or any Engineering or 
related field, and relevant expe- 
rience. Send cover letter and 
resume to Vivian Fernandes, 
MBT International, Inc., 400 
Perimeter Center Terrace NE, 
Suite 900, Atlanta, GA 30346. 


Sr. S/W QA Eng sought to perf 
s/w component or app testing, 
incl functional testing, installa- 
tion testing, integration testing 
@ component level, stress/load 
testing @ app level, user inter- 
face testing, patch testing, doc 
testing, & performance testing 
@ component level. Bach in CS, 
Eng, or closely related req'd; 
4yrs SQA exp req'd. Knowledge 
of SQA concepts functional test- 
ing, integrated testing, doc test- 
ing, & test environment set up; 
telecom stndrds incl SS7, TCAP, 
ISUP, IS41P, IS826, & 1S771; 
exp w/ scripting lang; hands-on 
exp creating SS7 load & function 
test using INET/MGTS script 
dvip; understanding of entire 
S/W dvipmt process, incl specifi- 
cation, doc, & QA. Contact 
Lightbridge, Inc., 320 Inter- 
locken Pkwy, Broomfield, CO 
80021. Attn: Cynthia Kelly w/ 2 
resumes. Job #1465.0101 


LOOKING FOR NEW 
CAREER? 
OUT 


April 19, 2004 


Chief Technica! Officer: Co. 
developing new Speech, 
Telephony, Vision & Internet 
products. Strategic planning, 
client projects, multi-media con- 
current sys, lead developers, 
assign projects. Req’s: PhD Deg 
in Comp Sci, Comp & Info Sci or 
related field. 3 yrs exp in job 
offered or 3 yrs advanced tech- 
nology software development 
exp which must incl., concurren- 
cy theory & practice, real-time & 
large-scale object-oriented sys. 
Exp can have been gained while 
pursuing degree. Proficiency in 
Java, C++, Visual Basic, Oracle, 
RDBMS, Telecom & Internet. 
Ability to present & publish 
results. 40hrs/wk. Send res. to 
D-3, P.O. Box 506, Phila, PA 
19105. 


System Developer: Design, de- 
velop, and implement software 
system for government Head 
Start and Pre-K program using 
C#.net, ASP.net and Microsoft 
SQL Server databases. Work 
with identified software prob- 
lems to determine the sequence 
of events that cause the problem 
and to correct any deficiency. 
Involved in all phases of enter- 
prise development including se- 
quence diagram and class dia- 
gram. Req. BS or equivalent in 
CS or CIS. Must be proficient in 
C#.net, Developer Express Xtra- 
Grid Suite, SQL Server, Installa- 
tion Shield and Crystal Report. 
MCSD Certificate required. 40 
hriwk, 9-5. Send resume to 
ChildPlus Software, Inc. at 1117 
Perimeter Center West, Suite 
300W, Atlanta, GA 30338. 
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IMPATH Inc., is in the business 
of improving outcomes for can- 
cer patients, and is a leading 
source of cancer information 
and analyses. We develop and 
offer innovative products and 
services that allow for more ac- 
curate diagnoses, and effective 
treatments for cancer patients 
Our talented IT team leads the 
way in our success, laying the 
groundwork for excellence 
HP-UNIX ADMINISTRATOR 
Based in our NYC operations. 
you will be responsible for 
administering K, D Class HP- 
UNIX Servers and HP Storage 
Arrays. Knowledge of HP back- 
up tools such as OMNIBACK Ii 
& HP Data protector 5.0 and 
Microsoft Windows NT/2000 
Server Administration are re- 
quired. The ability to maintain 
diagnose, and repair COMPAQ 
Server Hardware, and familiarity 
with specific healthcare billing 
and networking concepts, insur- 
ance applications, and network 
devices such as Router, Switch- 
es and firewalls are essential 


Candidates must be a Microsoft 
Certified System Engineer with 
4+ years experience, and have 
previously assisted laboratory 
departments in the generation of 
accurate scientific patient re- 
ports. The ability to provide end 
user support for Microsoft office 
products, home grown and im- 
aging applications is required 
HP UNIX and Windows 2000 
Platform training from authoriz- 
ed training centers is preferred 


We offer a highly competitive sa- 
lary and comprehensive benefits 
package that includes immedi- 
ate medical/dental/vision bene- 
fits, 3 weeks vacation to start 
and 100% fully vested 401(k) 
For immediate consideration 
please apply online through the 
"Careers" section of our website 
at www.impath.com EOE 
IMPATH 
The Cancer Information 
Company 


Database Analyst. BS in comp 
sci or rel. field; exp to incl. DB2 
(physical dsgn, impimt., change 
mgt., backup & recovery, & per- 
formance tuning), DB apps 

demonstrate know. of main- 
frame, distributed, &/or web 
prog. lang.; demonstrated com- 
munication skills, knowl of insur- 
ance & fin, svces, & willing to 
travel & do on-call support 
JOB#ACW23172. 


IT Systems Analyst. BS in comp. 
sci or rel. field exp. to incl J2EE 
app. servers, object oriented & 
internet technologies, distributed 
computing & enterprise connec- 
tivity, web app. dev., sys. admin 
& monitoring tools, formal itera- 
tive dev. proc., & mult. platforms 
(Unix & Windows); demonstrat- 
ed communication skills, knowl 
of insurance & fin. svces, & will- 
ing to travel & do on-call sup- 
port. JOB#ACW23173. 


Java Developer. BS in com. sci 
or rel. field; exp. to inci. Java 
(serviets & JSPs), struts, 
XSL/XML & DB2; demonstrated 
communication skills, knowl of 
insurance & fin services, & will- 
ing to travel & do on-call sup- 
port. JOB#ACW23171. Resume 
& cvr itr to: Principal Financial 
Group: opportunity@exchange.prin- 
Gipal.com; HR Employment, Des 
Moines, IA 50392-0550. Refer to 
JOB #'s mentioned above 
AAJEEO 


Programmer Analyst 


Watts Up Inc. ( Ossining, 
NY) seeks software pro- 
fessional to design, devel- 
op and implement busi- 
ness applications and 
software. Experience in 
Oracle, SQL, ASP, Visual 
Basic and ERP. (Navision) 
a plus. Competitive sal- 
ary. Mail resume and 
requirements to: 187 Main 
Street, Ossining, NY 
10562. EOE 


IT PROFESSIONALS 
Senior Consultant 


Position: (Glen Mills, Penn- 
sylvania and other locations 
through the U.S.). Responsible 
for providing clients with profes- 
sional consulting services in the 
area of infrastructure require- 
ments including the develop- 
ment, testing and implementa- 
tion of system software tailored 
to clients' business needs and 
requirements. Provi support 
for the procurement of hardware 
and software inciuding require- 
ments gathering. Provide techni- 
cal design and development of 
data structures and databases 
to ensure the accessibility, secu- 
rity, and integrity of cients’ busi- 
ness data and systems. 
Responsible for logical and 
physical data analysis and mod- 
eling of c-tree and Oracle and 
ensuring data architecture stan- 
dards. Responsible for installa- 
tion, upgrades, administr. 
tuning, backup and recovery 
strategy, implementation and 
maintenance of c-tree and 
Oracle databases on Sun 
Solaris and other operating sys- 
tems. Engage in the installation 
configuration, administration of 
Sun Solaris, including the con- 
figuration of network interfaces. 
veritas volume manager, root 
disk, and application of patches. 
Develop technical specifications 
and design policies, procedures 
and workflows and conduct 
tests, review controls, imple- 
ment systems and documenta- 
tion. Responsible for failover 
design including sun cluster 
installation and registration of c- 
tree high availability agents 
Coordinate software installation 
and configuration including sun 
cluster, MQ series, Veritas voi- 
ume manager, etc. Coordinate 
and assist on tuning of Siebel 
EAI (Enterprise Application 
Integration) and EIM (Enterprise 
Integration Manager), develop 
CICS-Cobo!l online and batch 
applications, and oversee and 
upgrade Oracle applications 
The wage offered is $94,340 per 
year. 


The work schedule is Monday- 
Friday, 9:00 am to 5:00 pm. The 
minimum requirements are as 
follows: Bachelor's degree or 
equivalent in Computer Science 
Math, Engineering (any), Infor- 
mation Systems or Business 
Administration + 3 years of 
experience in the job offered or 
3 years of experience as a 
Senior Consultant, Consultant or 
Senior Officer. Employer will 
regard a foreign degree to be 
equivalent to a U.S. Bachelor's 
degree as determined by an 
accredited credentials evalua- 
tion service. Related experi- 
ence must inciude at least 1 
year of experience in Sun 
Solaris, c-tree, Oracle Data- 
base, MQ Series, Siebel EAI 
(Enterprise Application Integ- 
ration) and Siebel EIM 
(Enterprise Integration Man- 
ager) 


Piease send your resume, refer- 
encing Job Order Number 
WEB406903 the PA 
Careerlink, FLC Unit, 235 W. 
Chelten Avenue, Philadelphia, 
PA 19144. EOE 


COMPUTER 


PricewaterhouseCoopers LLP 
Tax practice has opportunities 


tems Development and Adminis- 
tration. Positions require a bach- 
elor’s (master’s preferred) in CS, 
MIS or CE & 3 to 7 yrs related 
exp. Additional qualifications re- 
quired include Lotus Notes de- 
velopment exp & Oracle PL/SQL 
exp. Job site/location: Washing- 
ton, DC. Interested candidates 
please reference job code 
S5JPLN & fax resume to PwC 
GTT Recruiting at 813-348- 
7980. No phone calls please. 
Employer wiil only consider 
applicants authorized to work for 
any employer in the U.S. 
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BUSINESS CONSUL- 
TANT- manage all info. sys- 
tems & tech. related busi- 
ness needs for predomi- 


Data Communication An- 
alyst needed for law firm, 
4 years experience in 


Systems Analysts to provide in 
depth analysis, design, develop- 
ment and testing services for 
database dev projects; perform 
project scoping, planning, pro- 


Sr. Software Engineer/Devel- 
oper, Database Architect want- 
ed by MD Soft, Inc. Candidate 
must have minimum BS with 5- 
yr experience in IT field includ- 


Systems Software Engineer. 8a- 
5p, 40hrs/wk. Analyze, dsgn, 
test, support & install LAN/WAN, 
n/works, data communication 
systms, servers & workstations; 


Staff Engineer/Technical Group 
Leader - Design component- 
level hardware for GSM devices: 
to meet European EMC regula- 
tory reqmts. Determine develop- 


ing experience in data ware- 
house design, ETL develop- 
ment, using Acential datastage 
Please contact mdsoftinc@ 
yahoo.com. EOE 


K&M Softech is looking for pro- 
grammer/system system, soft- 
ware/project engineers or IT 
professionals. Both entry & 
experienced ievels needed 
Some positions require travel 
Skills in C/++, VB, Java 
Oracle, SAP, SQL are plus 
Please send resumes to 
Recruit@kmsoftech.com. EOE 


CGI Inform. Sys & Management 
Consultants, Inc. is looking for 
Sr. IT Consultant to develop web 
portal applications using Oracle 
9IAS, data warehouse using pl. 
sql, reports6! & discoverer. Min 
MS plus exp. of Oracle X/8/9 
QIAS, PL/SQL, JavaScript 
Contact _lisa.halter@cgi.com 
No calis. EOE 


Material Management Analyst 
wanted by Danco (subsidiary of 
NCH Corp) to handie manage- 
ment of import & vendor rela- 
tions!, obsolete inventory. Out- 
sourcing activities. Must have 
minimum bachelor in manage- 
ment with experience. Please 
apply at chriscol@nch.com 
EOE. No calls. 


Software Engineers to design. 
develop, maintain appls using 
OOAD, Java, XML, JSP, Java- 
Script, HTML, JDBC, EJB, JFC, 
Java beans, CORBA, Weblogic, 
RationalRose etc; perform reqs: 
problem analysis, solution de- 
sign, implementation, documen- 
tation on developed appls; pro- 
vide training and user support 
for appis; study/evaluate new 
tech. & methodologies; perform 
project planning,  time/cost 
scheduling. Require: MS or for- 
eign equiv. in CS/Information 
systems/Engg.(any branch)/ & 1 
yr exp. in IT. Comp. salary. fit 
travel involved. Send Resumes 
to: HR, Opal Soft, Inc. 3150 
Almaden Expwy Ste 205, San 
Jose, CA 95118 


Software Engineer/ Prog- 
rammer Analysts for con- 
sulting co in Skillman, NJ. 
Must have Bach degree in 
Comp Sci/Comp Eng or 
reltd field & 1-3 yrs exp. 
Send resume to: Optimal 
Solutions, 3 Richmond 
Drive, Skillman, NJ 
08558. 


help 


ment objectives. perform 
processor integration, design 
audio circuitry & provide SIM & 
DAI interfaces; 40 hrs/wk. Must 
have MS in Electronics Engrg 
Electronics/Communications 
Engrg or Electronics/Computer 
Engr & 3 yrs exp OR BS in 
Electronics Engrg, Electronics: 
Communications Engrg or 
Electronics/Computer Engr & 5 
yrs progressive exp in the spe- 
cialty field. Contact Panasonic 
Mobile, 1225 Northbrook Pkwy, 
Suwanee, GA 30024, Attn: D 
Greer, MR 


Jr. Software Engineer: Entry- 
level position to assist Sr. 
Software Engr in developing 
projects for co. MediaXtreme 
prod. & website using Assembly 
Language, C/C++, VB, ASP & 
Network Communication w 
Windows/Linux platforms. Req 
B.Sc. in Com. Engr. or a related 
field. No exp. req. but must 
demo ability to perform job 
through either course work or 
project involving Assembly 
Language, C/C++ & Network 
Communication. Resume w/ 
transcript to Engr Director. 
Keywest Technology, 14563 W. 
96th Terrace, Lenexa, KS 66215 


Software Developer III to per- 
form small scale systm or 


subsystm dsgn. B.S. in Comp 


Sci., Eng. or MIS or rel. field + 
3 yrs exp. w/C, C++, VB, Java 
& Perl on Windows & UNIX 
Exp. wiPalm OS; Oracle 
Reports Builder, Oracle 9iDS; 
and LoadRunner reqd 
Resumes to: Margo Massey, 
2510 North Dodge St., lowa 
City, IA 52245. 


SBI is looking for the following 
positions for its offices in 
Houston, TX, San Francisco, 
CA, Warren, NJ, Salt Lake City, 
UT and Portland, OR: Art 
Director, Web Designer, 
Programmer Analysts, Technical 
Architects, Technical Consul- 
tants, Business Strategists, 
Systems Analysts, Software 
Engineers, Software Deve- 
lopers, SAP Consultant, 
resumes by email or fax only to 
HR, SBI 2825 East Cottonwood 
Parkway, Suite 480, Salt Lake 
City, UT 84121: 
careers@sbiandcompany.com; 
Fax (801) 733-3201. 


vide business guidance for com- 
plex user problems; guide teams 
by providing methodologies to 
follow;interact with clients on 


Masters degree or foreign equiv 
in CSor Business Admin. High 
salary, f/t position. Travel 
involved. Resumes to HR, 
Smartsoft International, Inc., 
4898, South Old Peachtree Rd, 
Norcross, GA 30071 


Oracle Applications 
Database Administrators 


install, Maintain, Upgrade and 
Tune Oracle Applications 11i 


Min. Educ. Bachelor's degree 
or equi. Some positions re- 
quire Master's degree or equi 
Min. Exp. - Adequate industry 
experience. Job may involve 
working at various locations 
throughout the US 


Please send resume to 
Selectiva Systems, Inc. 
3333 Warrenville Rd 
Suite 200 
Lisle, IL 60532 


PROGRAMMER ANALYSTS for 
Buffalo Grove, IL office. Design 
& develop software applications 
using VB, Oracle, Coolgen, 
Interwoven, PVCS, Erwin, ASP, 
XML, UML; Develop & imple- 
ment client/server applications 
in Oracle Financials using syn- 
chronization techniques in 
Oracle tools such as PL/SQL, 
Developer 2000 & Designer 
2000. Bachelors reqd in Com- 
puters, Engineering, or any 
related field of study + 2 yrs of 
related exp. 40 hrs/wk. Must 
have proof of legal authority to 
work permanently in the U.S 
Send resume to HR Manager, 
Option Care, Inc., 485 Half Day 
Road, Ste. 300, Buffalo Grove, 
IL 60089 


Sr. Prog. Analysts to analyze, 
design, develop client server/n- 
tier appis using C, C++, Java 
Perl, HTML, SQL Server, XML, 
ASP, JSP, Serviets, EJB, Web- 
logic, Java Scripts, etc. under 
Windows, Unix os; tune appis 
for better performance; inteact 
with clients and end users for 
reqs gathering, analysis, planing 
and implementation; perform 
debugging and modifications of 
existing software. Require: MS 
or foreign equiv. in CS/ 
Engg.(any branch). F/T. compet- 
itive salary. Travel involved 
Resumes to: HR, Semafor 
Technologies, Inc., 3300, 
Holcomb Bridge Road, Ste 212, 
Norcross, GA 30092. 


ject time/cost schedules, quality 
of deliverables,study/evaluate 
new techs/methodologies; pro- 


project related issues. Require 


recommend n/work h/ware & 
s/ware; perform interface using 
niwork mgmt, CISCO routers, 
TCP/IP, Ethernet, VLSI tools & 
WinNT. 2 yrs exp. in job offd or 
as IT prof! using above comput- 
er skills reqd. Masters or equiv 
in Comp Sci, Info Systms. 
Electrical, Electronics or related 


Masters, Bach specified 
majors & 5 yrs work exp as IT 
profl accepted.) Resume: 
Software Decisions Group, Inc. 
235 Donamere Way, Alpharetta, 
GA 30022 


SENIOR SOFTWARE ENGIN- 
EER to design, develop, modify 
and support Computer System/ 
apps software. Analyze user 
needs, design databases, devel- 
op software solutions using 
Enterprise Resource Planning & 
related software using SAP, 
SQL, MAPICS and MS Access 
skills. Require: Master's degree 
in an Engineering discipline, 
Business or closely related field 
with 2 years of experience in job 
offered or as a system analyst. 
Extensive travel within the U.S 
Salary offered $72000/yr, 40 hrs/ 
week, 8 a.m. - 5 p.m. Submit 
resumes to: Shri Gangai, Syspro 
Technologies, Inc. 17440 Dallas 
Parkway, Suite 207, Dallas TX 
75287 


PROGRAMMER ANALYSTS 
req'd for Chicago, IL office 
Design & Develop software ap- 
plications using C, C++, VB, 
Delphi, ASP, XML, UML, Cool- 

, Interwoven, Oracle, PL/ 


signer 2000; Perform system & 
integration testing. Bachelors or 
Equivalent req'd in Computers, 
Engineering, math or related 
field of study +2 yrs of related 
exp. 40 hrs/wk. Must have legal 
authority to work permanently in 
the U.S. Send resume to HR 
Manager, Allied Business Con- 
sulting, Inc., 8700 W.Bryn Mawr, 
Suite 800 South, Chicago, 
60631 


Programmer Analysts to ana- 
lyze, design s/w appls using 
SAP R/3, ABAP/4, C, C++, 
Java, VB, JSP, JScript, HTML 
on UNIX/Windows os; gath- 
er/document reqs from user 
community; test/troubleshoot 
project app! code according to 
system objectives. Require a 
B.S. or foreign equiv in CS/ 
Engg (any branch)with 2 yrs 
exp in IT. High salary. F/T. 
Travel involved. Resume to 
HR, Smartsoft International, 
Inc., 4898, South Old 
Peachtree Rd, Norcross, GA 
30071 


field of Engg reqd. (In lieu of 


duties or B.S. in Systems 
Engineering (Computer 
Science). Please send 
resume to: contact@ 
casablancalaw.com or 
Attn: Human Resources, 
Casablanca & Associ- 
ates, P. A., 444 Brickell 
Ave, 616, Miami, Florida 
33131. 


Mphasis Corporation has mul- 
tiple openings for the follow- 
ing positions at its offices in 
New York, NY, Memphis, TN, 
Houston, TX and unanticipat- 
ed client sites throughout the 
U.S.: Programmer Analyst, 
Software Engineer, Project 
Manager, Management An- 
alyst, Sales Engineer, Busin- 
ess Development Manager, 
Finance Manager. Please 
send resume, salary history 
and position applied for to 444 
Park Avenue South, Suite 
#503, New York, NY 10016, 
Attn: H.R. Manager. 


Seeking qualified applicants for 
the following positions in Orlando. 
FL: Senior Programmer Analyst. 
Formulate/define functional req- 
uirements and documentation 
based on accepted user criteria 
Requirements: Bachelor's degree 
or equivalent* in computer sci- 
ence, MIS, mathematics, engi- 
neering or related field plus 5 
years of experience in systems/ 
applications development. Exp- 
erience with C and/or C++, Java 
and RDBMS also required. 
“Master's degree in appropriate 
field will offset 2 years of general 
experience. Submit resumes to 
Sibi George, FedEx Corporate 
Services, 1900 Summit Tower 
Bivd., Suite 1400, Orlando, FL 
32810. EOE M/F/D/V. 


Software Engineers needed: 
Req: BS degree or equivalent 
and/or rel. work exp. Part of the 
req. rel. work exp. must include 
2 years working with Oracle and 
1 year working with Java. Exp. 
can be simultaneous. Analyze, 
design and implement systems 
and applications; provide engi- 
neering solutions; develop soft- 
ware. Work with Oracle RDBMS, 
Java, XML, SQL and PL/SQL 
Mail resume, transcripts, refer- 
ences and salary requirements 
to: NewGen Technologies, Inc., 
405 Kelsey Park Drive, West 
Palm Beach, FL 33410. 


CBT Nuggets 


nantly Spanish speaking 
clientele. B.S. Computer 
Sci. or equiv + 2 yr in job or 
in info systems & fluency in 
Spanish reqd. Proficiency in 
Windows NT, Microsoft 
applications & Lotus Notes 
& Domino platforms. Apply 
to: World Business Consult- 
ants, Inc. 1191 Hiddenbrook 
Ln, Suwanee, Ga 30024 


Prog Analyst needed to ana- 
lyze, design, implement and 
test proprietary s/w apps w/ 
exp in Java, Borland C/C++, 
MS SQL, ASP, Activex, 
HTML, VB. Ability to design 
and develop conversion/ 
interface processes between 
Proprietary s/w apps and 
WONDA, !LX, Bloomberg 
DDE Server, Prime Access, 
P&L Link is necessary. Send 
resumes to: Watchpoint 
Asset Management, 74 DW 
Hwy, Merrimack, NH 03054. 


Software Engineer - 
InterContinental Hotels Group 
is seeking qualified applicants 
for positions at the company's 
North American headquarters 
in Atlanta. Develop real-time 
revenue management applica- 
tions for use in multi-platform 
environment. Requires rele- 
vant degree and experience 
with revenue management 
systems for hospitality/tourism 
industry. Apply to Francene 
Taylor, Six Continents Hotels, 
Inc., Three Ravinia Drive, 
Suite 100, Atlanta, Georgia 


itcareers.com 
and take the 
hassle out job 
searching! 


Inc. 
(866) 225-8064 
www.ipexpert.com 

CCIE (R&S, SEC, and C&S), CCSP, 
CCNP, CCNA, IP Telephony 


(888) 507-6283 (541) 284-5522 
www.cbtnuggets.com 

Affordable training videos 
MCSE, MCDBA, MCSD, CCNA, 
Citrix, Linux, A+, Net + 
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SENIOR SOFTWARE ENGIN- 
EER to design, develop and 
implement interfaces to build 
custom solutions using MS 
DNA, .NET architecture; Design 
and develop n-tier web-based 
application software using C# 
VB.NET, ASP.NET, NET Web 
Services, SQL Server 2000 
COM, DCOM and COM+; De- 
velop databases by designing 
queries and writing stored pro- 
cedures using T-SQL. Require 
Bachelor's degree in Computer 
Science, an Engineering disci- 
pline, Electronics, or a closely 
related field with 5 yrs of pro- 
gressively responsible exp in the 
job offered or as a Programmer: 
Analyst or Programmer. Exten- 
sive travel on assignments to 
various client sites within the 
U.S. is required. Competitive 
salary offered. Apply by resume 
to: Mayte Fernandez, Momen- 
tum Consulting Corp., 7725 
N.W. 48th Street, Suite 100 
Miami, FL 33166; Attn: Job JP. 


Immediate opportunities for both 
entry-level and experienced 
Programmers, Programmer An- 
alysts, Systems Analysts, Soft- 
ware Engineers, DBA's and 
Software Consultants with three 
or more of the following skills: 
Java, Shell Scripts, SAS, PLC, 
Textra, XML, SQL, D82, mq- 
PCX, Oracle, PowerBuilder, 
Rational Rose, Sybase, Perl, 
PeopleSoft, Crystal Enterprise. 
Crystal Reports, Teradata & MS 
Visual Studio. Bachelor's or 
Master's degree reqd., depend- 
ing on position. tyr exp reqd. 
depending on position We also 
accept the foreign edu. equiv. of 
the degree, or the degree equiv. 
in edu. and exp. Frequent travel 
and relocation. Send confiden- 
tial résumé and salary require- 
ments to: HR, Transworld, Inc 
1515, Woodfield Road, Ste. 625 
Schaumburg, IL, 60173 Visit our 
website at www.transwid.com. 


Senior Software Engineer. Req 
Bachelor's degree (or equiv. for- 
eign educ.) in Computer 
Science or Electronic Eng. and 
1 year’s exp. in the job offered or 
1 year’s exp. developing interac- 
tive web-based apps. util. serv 
er-side JAVA & Coldfusion. Ali 
stated experience must include 
use of XML and InstallShield to 
deploy web-based applications. 
Must have experience in devel- 
opment of interactive web-based 
e-learning applications. Deve- 
lop interactive web-based e- 
learning applications utilizing 
server-side JAVA & Coldfusion 
Enhance and develop e-learning 
applications and deployment 
software. 40 hrs./wk. Apply with 
resume to: SkillSoft Corporation 
Attn: Jennifer Soldner, 20 
Industrial Park Drive, Nashua 
NH 03062 


Sr. Database Programmer - 
Analyze, design and develop 
database computer systems. 
using Transact-SQL Stored 
procedures. Provide support 
and training on programmed 
system modules BS in informa- 
tion Systems + 2 years experi- 
ence in database development 
and administration, or MS in 
Information Systems. Competi- 
tive salary. Please send res- 
ume to ByDesign Technologies. 
Inc. 3901 Coconut Paim Drive 
Suite 117, Tampa, FL 33619 
No phone calls please. Equal 
Opportunity Employer. 


Apply and maintain nuclear 
power plant software applica- 
tions including NUMAD (Nuclear 
Materials Accounting Database) 
to develop and maintain the 
nuclear plant technology sys- 
tem; perform emergency testing 
drills on nuclear plant software 
to ensure functioning; analyze 
and assess work planning and 
implementation system for busi- 
ness operators to direct engi- 
neers to perform maintenance 
on nuclear plant equipment 
plan, design and implement soft- 
ware systems to support man- 
agement planning activities; rec- 
ommend and engage new busi- 
fe@Ss opportunities for the nuc- 
lear plant in the technology area 
ensure that all nuclear plant soft- 
ware systems are current so that 
clients projects comply with 
industry regulations; supervise 
and lead teams to implement 
client projects and ensure pro- 
ect deliverables are met. Re- 
quires Bachelors in Computer 
Science or Management !nfor- 
mation Systems plus 1 yr. exp 
in job or 1 yr. exp. in applying 
and maintaining nuclear power 
plant application NUMAD to de- 
velop and maintain nuclear plant 
technology system. 40 Hrs./wk 
$52,423.00/Yr. Must have proof 
of legal authority to work in the 
United States. Send your res- 
ume to the lowa Workforce 
Center, 800 7th Street, SE. 
Cedar Rapids, lowa 52406- 
0729. Please refer to Job Order 
1A1101782 Employer paid 
advertisement. 


PROGRAMMER/ANALYST to 
provide technica! production 
support for PeopleSoft Version 
7.5x financial applications, in- 
ciuding GL, AP, Asset Manage- 
ment, and Project Costing & 
Purchasing. Design, develop 
and maintain various systems 
using various management 
and development tools and 
techniques including People- 
Soft, SQL Server, Windows NT 
2000, IIS, Visio, VSS, Visual 
Interdev, and Visual Basic 
Require: B.S. degree in Com- 
puter Science/Engineering, 
Management Information Sys- 
tem/Math or a closely related 
field with three years of experi- 
ence in the job offered or as a 
Programmer/Software 
Engineer/DBA or equivalent 
Extensive travel on assign- 
ments to various client sites 
within the US. is required 
Salary: $85,301 per year, 9:00 
am to 6:00 pm, M-F. Contact 
Anu Singh, eSynaxis Interna- 
tional, Inc., 3922 Riversong 
Court, Suwanee, GA 30024 
Attn: Job IS. 


Programmer. Job location: Cin- 
cinnati, OH. Duties: Develop 
client server appls. for system 
using Visual C++ & Sybase 
Perform software programming 
for business appls. inci. modifi- 
cation requirements & version 
upgrades. Implement SQL com- 
mands, stored procedures & 
triggers in Sybase database 
environ Requires: B.S. in 
Comp. Sci., Eng. or related field 
& 2 yrs. exp. in the job offered or 
2 yrs. exp. as a Prog./Analyst or 
Analyst. Concurrent exp. must 
incl. 2 yrs. exp. developing client 
server appls. 40 hrs./wk.; 8:00 
a.m. to 5:00 p.m. Send resume 
(no calls) to: Bob Miller, CTG. 
Inc., 312 Plum St. Ste. 700 
Cincinnati, OH 45202-2618 


Software Engineer - 
Harleysville, PA. Job entails and 
requires experience in child sup- 
port industry including experi- 
ence in design. development 
and implementation of applica- 
tions using SQL Server, C++ 
Delphi, Pervasive, Crystal 
Reports, Attachmate Exira 
Unisys NDP series and 
Kliendienst series. Relocation 
within USA possibie. Attractive 
compensation package. Send 
resume to HR, Immergent 
Technologies, 2290 Skyview 
Drive, Harleysville, PA 19438 


Business Objects has an open- 
ng for the position of Sr. 
Consultant to be based out of 
our San Jose, CA office 


The position requires a 
Bachelor's or foreign degree 
equivalent in CS/IS/Business or 
related field plus five years of 
rk experience as IT, software 
sulting or related. The job 
Implement, ana- 

design and delivery 
Objects Decision 


Complement the ser- 
vice offerings of consulting firms 
systems integrators, and large 
ustomer personnel in architect- 
ng, designing, implementing 
and integrating business solu- 
tions in the enterprise. Identify 
all technical requirements within 
assigned account for delivering 
the solutions directly and for 
working with corporate support 
personnel, sales management 
and the Field Sales personnel to 
resolve any technical issues or 
requirements. Provide techni 


Cai solutions to customers while 
dentifying new opportunities 
Travel extensively throughout 


Dly for a position, visit our 

at www.businessob- 
jects.com/careers or forward 
your resume (ref CW0304) to 
Business Objects Americas 
Staffing, 3030 Orchard 

San Jose, CA 95134 


Full-time Business Intelligence 
Developer. Duties include BCA 
scheduling, UNIVERSE devel- 
opment, server cluster adminis- 
tration. Analyze and build data 
universes and reports. Deploy- 
-ment of Business Objects 
reports through Web Intell- 
gence. Job responsibilities 
include maintaining users and 
supporting existing report cata- 
log. Maintain the BCA Server 
schedule. Responsible for the 
maintenance and generation of 
reporting worksheets that are 
delivered via Excel. Work with 
Universe development, BCA 
Scheduling, Business Objects 
development, Oracle PL/SQL 
Excel Analysis, development of 
BI systems in data warehousing 
VBA Macro Coding in Business 
Objects, Application Foundatio 
3.x/6.x, Web Intelligence Server 
dministration 6.x 
Objects Supervisor 
Web intelligence 


Dimensional Modeling 

T-SQL, Microsoft 

Oracle. Must have a Bachelors 
Degree in Management. Foreign 
degree equivalent accepted 
Must have 5 years of experience 
in job offered or position with 
same duties. Send resume to 
Kim Brown, 245 Perimete 
Center Parkway, Ste 
Atlanta, GA 30346 


Software engineer to design 
develop and test computer pro- 
grams for business applications 
analyze software requirements 
to determine feasibility of de- 
sign; direct software system 
testing procedures using exper- 
tise in J2EE, Struts, MQ Series. 
WebLogic and EJB. Require- 
ments: Bachelor's Degree or 
equivalent in Computer Science 
or related field and two years 
experience as a software engi- 
neer or computer programmer, 
knowledge of J2EE, Struts, MQ 
Series, WebLogic and EJB 
Salary: $78,500/year. Working 
Conditions: 8:00 A.M. to 5:00 
P.M., 40 hours/week, involves 
extensive travel and frequent 
relocation. Apply: Site Manager. 
Armstrong County CareerLink 
1270 North Water Street. PO 
Box 759, Kittanning, PA 16201 
Job No. WEB409565 
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Continued from page 
Patches 


hearts,” said Kamens, who had 
patch more than 4,000 Win- 
dows systems last week the 
Waltham, Mass.-based scien- 
tific equipment manufacturer. 
Among the flaws considered 
particularly dangerous was 
buffer overrun vulnerability 
user authentication function 
called the Local Security Au- 
thority Subsystem. Hackers 
who successfully exploit the 
flaw could take complete con- 
trol compromised systems. 


Four major Linux distributors have 
sharply criticized recent report 
which Forrester Research Inc. 
found that Microsoft Corp. out- 
performed them responding 
and fixing security flaws. 

letter released April 
Linux distributors Debian, 
Inc., Red Hat Inc. 
and SUSE Linux questioned 
the validity conclu- 
sions and claimed that the report 
had “extremely limited 
value” for users. 

bogus its current form,” 
said Joey Schulze, member 
security team. 

Laura the author 
the Forrester report, defended 
her company’s analysis the 
data. All vendors studied the 
report were measured equally us- 
ing publicly available vulnerability 
data and widely accepted vulner- 
ability rating measures from the 
National Institute Standards 
and Technology (NIST), she said. 

Cambridge, Mass.-based For- 
report “Is Linux More 
Secure than Windows?” was re- 
leased March 22. looks 
how Microsoft and the four Linux 
vendors responded reports 
security flaws from June 2002, 
May 31, 2003. Microsoft ranks 
first among the vendors for its 
and its “thor- 
oughness” dealing with report- 


buffer overrun flaw related 
component used secure 
communications between serv- 
ers and clients public net- 
works was also deemed criti- 
cal risk, for the same reason. 

Both flaws present “high- 
value targets” for hackers be- 
cause they involve security 
and authentication compo- 
nents Windows, said Neel 
Mehta, research engineer 
Internet Security Systems Inc. 
Atlanta. expect [the 
short time,” Mehta said. 

Southern Regional Health 
System Riverdale, Ga., had 


security vulnerabilities. 

average, Microsoft took 
days between public disclosure 
and the release fix, and was 
the only company fix all vulner- 
abilities, the report stated. How- 
ever, Microsoft also had the high- 
est percentage serious flaws. 

contrast, Moreno Valley, 
Calif.-based MandrakeSoft took 
days average issue fixes 
for its Linux distribution, the For- 
rester report said. SUSE took 
days, and Red Hat and Debian 
each took average days. 

The Linux vendors ranked low- 
than Microsoft terms the 
percentage reported flaws 
they fixed. Red Hat, which fixed 
all but one flaw, was closest, 
while Debian ranked last, fixing 
275 out 286 flaws. 

While the data that the analysis 
based accurate, the con- 
clusions are not, said Vincent Da- 
nen, security update manager 
MandrakeSoft. measuring only 
the time elapsed between public 
knowledge security flaw and 
the availability fix, 
the study failed make distinc- 
tion between the critical flaws 
and the not-so-severe ones, the 
jointly signed letter said. 

Linux vendors typically treat 
flaws case-by-case basis, 
with high-risk flaws getting 
higher priority than low-risk ones, 


Viet 


patch nearly 100 Windows 
and Windows 2000 
servers last week. 

“These announcements 
are becoming more like the 
Chicken Little [story],” said 
Reid Burch, the health care or- 
ganization’s network services 
manager. “I’m not saying that 
ignoring the patches. 


But has become comical that 


these patches are released 
frequently.” 

Since the hospital has 
run patient care applications 
around the clock, the task 
patching systems very diffi- 
cult, Burch added. 


Danen said. The response 
flaw based risk 
ments made each distributor 
and may not always coincide with 
the assessment made third 
party such NIST, said. 

“Our users will know that for 
flaws, can respond 
within hours,” SUSE Linux said 
statement. SUSE now owned 
Novell Inc. 

focusing purely quanti- 
tative analyses, the Forrester re- 
port fails “to differentiate be- 
tween both the seriousness 
the flaws and, more importantly, 
the quality the fixes,” SUSE 
said its note. 

Making distinction between 
serious flaws and not-so-serious 
ones when devising response 
crucial, said Joe Poole, manag- 
technical support Bos- 


Flaw Scoreboard 
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Time frame: dune 1, 2002, to May 31, 2003 
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Buffer overrun vulnerability the Local Security Authority Subsystem 


interface: Critical for Windows 


findows 


Buffer overrun the Private Communications Transport protocol: 


Critical for Wind 


4.0 and Windows 2000 


RPC Runtime Library vulnerability: Critical for Windows 2000, 


and Windows Server 2003 


Fenwick West LLP had 
allocate three workers 
patching duties last week, and 


| 
Thursday, all three were 
working overtime, said Matt 


Kesner, the Mountain View, 
Calif.-based law firm’s chief 
technology officer. 


Linux Vendors Claim Forrester Report Favored Microsoft 


Department Stores LLC 
Reading, Pa. 

“[Vendors] have separate 
the things they need tomor- 
row and what can done 
month,” said. 

This isn’t the first time that 
Forrester report comparing Mi- 
crosoft products and Linux has 
been criticized. September, the 
research firm drew criticism from 
over Microsoft-funded 
report that that Micro- 
soft development platforms had 
substantial cost advantage over 
Linux/J2EE for portal applica- 
tions 41320]. 

But Koetzle stressed that 
her security report had Mi- 
crosoft backing whatsoever. 
“Microsoft did not pay for this 
report,” she said. 

Vijayan 


SOURCE: FORRESTER RESEARCH INC . CAMBRIDGE, MASS. 
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Even so, the firm was having 
problems getting the patches 
installed, with some machines 
requiring multiple attempts 
and PCs needing com- 
pletely reformatted accept 
the patches. 

“Despite the fact that Mi- 


crosoft has made this huge 
commitment security, they 
are not saying why these vul- 


nerabilities are showing 
and what exactly they are do- 
ing research and patch 
them,” Kesner said. There are 


also questions about how long 


Microsoft might have known 
about these vulnerabilities be- 
patches became avail- 
able, said. 

“There are more questions 
asked than answered when 
such large update re- 
leased,” said Robert Bagamery, 
systems support specialist 
large Canadian utility that 
asked not named. 

wonder what they’ve bro- 


ken with the fix,” Bagamery 


said. wonder how many 
more there are, and how many 


they know about but aren’t 


talking 

Microsoft didn’t respond 
specific user complaints. But 
Stephen Toulouse, security 
program manager its Secu- 
rity Response Center, said the 
company’s decision address 
many flaws with few large 


patches was driven practi- 


cal considerations. 

“When see the opportu- 
nity ship one set files that 
contain multiple fixes, real- 
shipping separate fixes, said. 

The approach makes easi- 
for users apply the patch- 
es, Toulouse added. “It was 
the best solution for our cus- 
tomers,” said. 46247 


lor libraries and other users 
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FRANK HAYES FRANKLY SPEAKING 


SEEMS LIKE SIMPLE ENOUGH DEAL: Last week, fast food 
chain McDonald’s announced it’s having 6,000 its U.S. out- 
lets set for Wi-Fi access (see story, page 12). The new hot 
spots will let McDonald’s customers link the Internet 
while they chow down, for mere $2.95 per hour. There’s noth- 
ing really new about that lots Starbucks coffee joints and few 
Schlotzsky’s delis already offer Wi-Fi. And their food’s better, too. 
The subtle difference McDonald’s? Even though third party 
Wayport Inc. will install and run the Wi-Fi network, McDonald’s 
will use the same network for its own cashless payment system. 
other words, instead paying for 6,000 pricey wireless proj- 


ects support cashless payment, McDonald’s 
plans get someone else the work and 
get them pay for the privilege. 

Now that’s ROI. 

effect, McDonald’s has cleverly turned out- 
sourcing inside out. Instead McDonald’s pay- 
ing Wayport run its wireless networks, Way- 
port pays for the equipment, installs and runs 
it. Then Wayport charges McDonald’s cus- 
tomers who use the Wi-Fi network, and splits 
the take with Mickey D’s. 

And McDonald’s gives little piece that 
revenue stream for the right use little piece 
the wireless bandwidth for its cashless pay- 
ment system. 

Everybody comes out ahead. Wayport gets 
thousands prime locations for its service. 
McDonald’s offloads the work installing and 
securing wireless networks and turns cost 
center into revenue stream. Customers get 
check e-mail download MP3s and pay when 
their Happy Meals arrive. 

And the rest us? get new way look- 
ing Wi-Fi. 

For the past few years, we’ve been 
fighting Wi-Fi. Let’s face it, most 
corporate people wish Wi-Fi had 
never been invented. wish those 
cheap wireless access points cost 
$50,000 each, users wouldn’t buy 
them, sneak them and connect 
them our networks. wish 


and the fact that it’s hard limit Wi-Fi’s 
range. It’s costly, time-consuming and big pain 
all because want keep outsiders off our 
Wi-Fi networks, just want keep them 
off our wired networks. 

Now, let’s say turn that mind-set inside 
out, using the McDonald’s model. 

Suppose that instead fighting Wi-Fi, you 
got paid Wi-Fi provider that ran Wi-Fi 
network for you. What would happen then? 
That provider would get the hassles buying 
equipment and positioning antennas and secur- 
ing everything. 

Your employees could use Wi-Fi through 
virtual private network part the deal. That 
would wipe out any reason for them sneak 
their own cheap Wi-Fi access points they’d 
getting better equipment for free. 

And instead trying limit the Wi-Fi hot 
spot’s range hide from outsiders, 
want everyone know about it. Why? Because 
every time outsider accessed your Wi-Fi net- 
work, make money. 

pipe dream? Maybe, maybe not. True, 
Wi-Fi users wish hot spots were 
everywhere. But not every location 
would profitable enough 
Wi-Fi provider worth the 
trouble. Whether you could find 
Wi-Fi provider foot the bill, 
even split the cost, depends 
the market, demand and location, 
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Showing Off Like It’s 1999 


This internal audit director likes impress everyone 
with his knowledge, says pilot fish who works with the 


guy. ata VP-level meeting discuss the ramifica- 
tions the Sarbanes-Oxiey Act, the audit director de- 
cides show “All this Sarbanes-Oxley work 

reminds says. “When was that again?” 


Dead Wrong 


this mainframe 
operator pilot 
fish needs call 


gets mandate 


batch-job problem. “The security. The proposal: 

online call list was Add security cameras 

rious for being out and turnstile dis- 

date,” fish says. Buthe courage tailgating when 

calls and asks name employee uses his 
for the programmer badge unlock the 
the top the list. door. But when the ar- 


pause, the woman 


chitect hears the idea, 


said the programmer walks pilot fish 
was dead,” says stunned empty section hallway 
fish. mumbled and with one hard 

was sorry and would kick, knocks hole all 
the secondary program- the way into the data 


mer, and hung up. Need- 
ered the wall with metal 
reinforcement,” says 


less say, the next day 
our called the 


center. “First, 


programming get their fish. “Then returned 
call lists date.” the subject the 

turnstile.” 
Unclear 
The Concept Plan? What Plan? 
the late 1970s, The plan: next 
this uses Monday, users’ de- 
punch cards for passing fault passwords will 
information between last name plus the 
quested changes Security number. 
required more “E-mails are dispatched 
tween job upcoming change and 
card,” says analyst says help desk pilot fish. 
there would addition- the new passwords don’t 
changes tothe work. the help desk 
grams for multi- flooded with calls, late- 
card processing, techs make 
that meant admission: “That 
charges. said, password scheme was 
card and punch them just made 


location, location. 

But never know 
possible until you start thinking 
creatively about Wi-Fi. And you’ve 
already got burger-flipping clown 
example how turn Wi-Fi 
problems inside out. 46220 


didn’t have hunt down those 
unauthorized access points and 
fight with users remove them. 
And actually adopted 
Wi-Fi for some applications, still 
wish didn’t have worry about 
Wi-Fi security, Wi-Fi compatibility 


FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered IT for more 
than years. Contact him 
frank_hayes@computerworid.com. 
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IBM Express Middleware: Designed 
and developed for midsize companies. 


(IBM muscle for less moolah.) 


MIDDLEWARE POWERFUL IBM SOFTWARE. The kind software that makes your applications work better solve 
your business problems. answer. Lotus’ and And the form the IBM Middleware 
Express Portfolio, it's now more accessible than ever for midsize businesses. 


The IBM Middleware Express Portfolio engineered work with your existing business applications whether they run 
Windows? Linux® It's engineered deployed those without computer science degrees. It's priced put 
smile face. nimble. Quick. Flexible. 


Your technology will work harder meet the demands your customers, your business goals and your needs. makes 
your business more responsive the unforeseen. course, all this easy implement, easy install, simple maintain. You 
need learn more. find IBM Business Partner your area, visit 
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